CVE-2026-110776

Name of the Vulnerable Software and Affected Versions MDTF – Meta Data and Taxonomies Filter versions prior to 1.4.2

Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Stored Cross-Site Scripting (XSS), a technique where malicious scripts are permanently stored on the target server. The issue occurs via the vars parameter and requires the target site to have a published page or post containing the [meta data filter results] shortcode. When a user accesses the affected page, the injected scripts execute in their browser.

Recommendations Update to a version newer than 1.4.1.