CVE-2026-96666

The Schema App Structured Data plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.3.2 . The root cause is insufficient input sanitization and output escaping within the 'Remove Microdata' Output Filter for comment content. This allows una...