Medium · 6.5 CVE-2024-43278 EUVD-2024-40170GHSA-282p-qvpm-4cp8

WordPress Meta Field Block plugin <= 1.2.13 - Cross Site Scripting (XSS) vulnerability

Published Aug 18, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Phi Phan Product: Meta Field Block

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Phi Phan Meta Field Block allows Stored XSS.This issue affects Meta Field Block: from n/a through 1.2.13.

Affected products

Vendor	Product	Affected	Fixed
Phi Phan	Meta Field Block	≤ 1.2.13	—

References

https://patchstack.com/database/vulnerability/display-a-meta-field-as-block/wordpress-meta-field-block-plugin-1-2-13-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry