Threats tagged 'ghsa-fgj3-2j96-rrqh'

The MDTF – Meta Data and Taxonomies Filter plugin for WordPress versions up to and including 1.4.1 contains a stored cross-site scripting (XSS) vulnerability via the 'vars' parameter. This vulnerability arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject malicious scripts. Exploitation requires that a page or post includes the plugin's [meta_data_filter_results] shortcode, which outputs the vulnerable content.