PT-2024-16879 · WordPress · Schema App Structured Data

Name of the Vulnerable Software and Affected Versions: Schema App Structured Data plugin for WordPress versions up to, and including, 2.2.4 Description: The issue arises from the use of add query arg without proper escaping on the URL, allowing unauthenticated attackers to inject arbitrary web...