PT-2023-14983

Name of the Vulnerable Software and Affected Versions The Markup JSON-LD structured in schema.org WordPress plugin versions 4.8.1 and earlier Description The issue concerns a failure to validate and escape certain shortcode attributes in the plugin, which could allow users with the contributor ro...

CVE-2022-4666: Undefined Security Weakness

The Markup JSON-LD structured in schema.org WordPress plugin through 4.8.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Sit...