Medium · 5.9 CVE-2024-29140 EUVD-2024-26176GHSA-m28g-9268-fpmg

WordPress MJM Clinic plugin <= 1.1.22 - Cross Site Scripting (XSS) vulnerability

Published Mar 19, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Matt Manning Product: MJM Clinic

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Matt Manning MJM Clinic allows Stored XSS.This issue affects MJM Clinic: from n/a through 1.1.22.

Affected products

Vendor	Product	Affected	Fixed
Matt Manning	MJM Clinic	≤ 1.1.22	—

References

https://patchstack.com/database/vulnerability/mjm-clinic/wordpress-mjm-clinic-plugin-1-1-22-cross-site-scripting-xss-vulnerability-2?_s_id=cve vdb-entry