Lucene search
+L

2 matches found

OSV
OSV
added 2026/07/01 6:32 p.m.11 views

GHSA-HWMC-R6MF-JH83 Schema.org has cross-site scripting (XSS) via script break-out in toScript() output

Schema.org has a cross-site scripting XSS vulnerability via script break-out in toScript output...

5.3CVSS5.6AI score
SaveExploits0References5
Friends Of PHP
Friends Of PHP
added 2026/04/20 7:0 p.m.25 views

Cross-site scripting (XSS) via script break-out in toScript() output

What's Changed Escape HTML tags in toScript output to prevent script break-out by @freekmurze in https://github.com/spatie/schema-org/pull/242 Values containing passed as schema properties could break out of the generated block and execute injected HTML when the value was attacker-controlled...

6.2AI score
SaveExploits0Affected Software1
Rows per page
Query Builder