CVE-2025-3414: Undefined Security Weakness

The Structured Content JSON-LD wpsc WordPress plugin before 1.7.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2025-0512: Improper Neutralization of Input During Web Page Generation

The Structured Content JSON-LD wpsc plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's scfslocalbusiness shortcode in all versions up to, and including, 6.4.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

PT-2025-9647

Name of the Vulnerable Software and Affected Versions The Structured Content JSON-LD wpsc plugin for WordPress versions up to, and including, 6.4.5 Description The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the plugin's sc fs local busines...

PT-2024-20606

Name of the Vulnerable Software and Affected Versions Gordon Böhme, Antonio Leutsch Structured Content JSON-LD wpsc versions 1.6.1 and earlier Description The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting. This allows for Store...

CVE-2024-24839: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gordon Böhme, Antonio Leutsch Structured Content JSON-LD wpsc allows Stored XSS.This issue affects Structured Content JSON-LD wpsc: from n/a through 1.6.1...

CVE-2023-49819: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Gordon Böhme, Antonio Leutsch Structured Content JSON-LD wpsc.This issue affects Structured Content JSON-LD wpsc: from n/a through 1.5.3...

CVE-2023-49820: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gordon Böhme, Antonio Leutsch Structured Content JSON-LD wpsc allows Stored XSS.This issue affects Structured Content JSON-LD wpsc: from n/a through 1.5.3...