← Back

Display Post Meta, Term Meta, Comment Meta, And User Meta

display_post_meta,_term_meta,_comment_meta,_and_user_meta

Vendor: Display Post Meta, Term Meta, Comment Meta, And User Meta Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-1661
1Display Post Meta, Term Meta, Comment Meta, And User Meta Project
1Display Post Meta, Term Meta, Comment Meta, And User Meta
Jun 17, 2026
May 31, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
The Display post meta, term meta, comment meta, and user meta plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post metadata in versions up to, and including, 1.0.0 due to insufficient input sanitiza...Show more
The Display post meta, term meta, comment meta, and user meta plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post metadata in versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.Show less