Lucene search
+L

219 matches found

CVE
CVE
•added 2026/01/23 5:29 a.m.•45 views

CVE-2025-14069

This CVE (CVE-2025-14069) affects Schema & Structured Data for WP & AMP (WordPress) up to version 1.54, via Stored Cross-Site Scripting in the saswp_custom_schema_field. Affected actor must have Contributor+ rights; exploitation would run scripts on pages when viewed by users. The Wordfence entry...

6.4CVSS6.1AI score0.00265EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/01/23 12:00 a.m.•18 views

WordPress Plugin: Schema & Structured Data for WP & AMP – Cross-Browser Script Vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

6.4CVSS5.6AI score0.00265EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/23 12:00 a.m.•2 views

CVE-2025-14069: Improper Neutralization of Input During Web Page Generation

The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'saswpcustomschemafield' profile field in all versions up to, and including, 1.54 due to insufficient input sanitization and output escaping. This makes it possible for authenticate...

6.4CVSS6AI score0.00265EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/26 5:16 a.m.•14 views

CVE-2025-8075

Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems ICS and OT/IoT security, has discovered that validation of incoming XML format request messages is inadequate. This vulnerability could allow an attacker to XSS on the user's browser. The...

5.8CVSS0.00201EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/19 12:00 a.m.•17 views

GT Edge AI 安全漏洞

GT Edge AI is an edge AI solution from US-based GT Edge AI. A security vulnerability exists in versions prior to GT Edge AI v2.0.10-dev, which originates from the injection of a specially crafted JSON payload that could lead to the execution of arbitrary code...

9.8CVSS7.1AI score0.00503EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2025/11/03 10:28 p.m.•18 views

WordPress Schema & Structured Data for WP & AMP plugin <= 1.51 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Schema & Structured Data for WP & AMP versions = 1.51...

6.4CVSS5.6AI score0.00231EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/11/01 12:00 a.m.•24 views

PT-2025-44708

Name of the Vulnerable Software and Affected Versions Schema & Structured Data for WP & AMP plugin for WordPress versions through 1.51 Description The Schema & Structured Data for WP & AMP plugin for WordPress has a Stored Cross-Site Scripting issue related to the 'saswp tiny multiple faq'...

6.4CVSS5.5AI score0.00231EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2025/11/01 12:00 a.m.•13 views

WordPress plugin Schema & Structured Data for WP & AMP 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS5.8AI score0.00231EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/01 12:00 a.m.•0 views

CVE-2025-11502: Improper Neutralization of Input During Web Page Generation

The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'saswptinymultiplefaq' shortcode in all versions up to, and including, 1.51 due to insufficient input sanitization and output escaping on user supplied attributes. This mak...

6.4CVSS6AI score0.00231EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2017-1578

Malware in sbrugna...

7.5CVSS7.6AI score0.0243EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2023-48617

Malicious code in bioql PyPI...

5.3CVSS8.4AI score0.00438EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2023-56377

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00328EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2024-43539

Malicious code in bioql PyPI...

5.3CVSS6.5AI score0.00345EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/10/02 6:46 a.m.•35 views

CVE-2025-9512

The Schema & Structured Data for WP & AMP WordPress plugin before 1.50 does not properly handles HTML tag attribute modifications, making it possible for unauthenticated attackers to conduct Stored XSS attacks via post comments...

6.1CVSS5.9AI score0.00212EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/01 6:00 a.m.•39 views

CVE-2025-9512

The Schema & Structured Data for WP & AMP WordPress plugin, in versions prior to 1.50 , contains a vulnerability where it fails to properly handle HTML tag attribute modifications. This flaw allows unauthenticated attackers to perform Stored Cross-Site Scripting (XSS) attacks via post comments. T...

6.1CVSS5.5AI score0.00212EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/01 6:00 a.m.•37 views

CVE-2025-9512 Schema & Structured Data for WP & AMP < 1.50 - Unauthenticated Stored-XSS

The Schema & Structured Data for WP & AMP WordPress plugin before 1.50 does not properly handles HTML tag attribute modifications, making it possible for unauthenticated attackers to conduct Stored XSS attacks via post comments...

0.00212EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/01 6:00 a.m.•7 views

CVE-2025-9512 Schema & Structured Data for WP & AMP < 1.50 - Unauthenticated Stored-XSS

The Schema & Structured Data for WP & AMP WordPress plugin before 1.50 does not properly handles HTML tag attribute modifications, making it possible for unauthenticated attackers to conduct Stored XSS attacks via post comments...

5.5AI score0.00212EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/01 12:00 a.m.•1 views

CVE-2025-9512: Undefined Security Weakness

The Schema & Structured Data for WP & AMP WordPress plugin before 1.50 does not properly handles HTML tag attribute modifications, making it possible for unauthenticated attackers to conduct Stored XSS attacks via post comments...

6.1CVSS5.8AI score0.00212EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
•added 2025/06/22 12:00 a.m.•11 views

Embedding Trust at Scale: Physics-Aware Neural Watermarking for Secure and Verifiable Data Pipelines

We present a robust neural watermarking framework for scientific data integrity, targeting high-dimensional fields common in climate modeling and fluid simulations. Using a convolutional autoencoder, binary messages are invisibly embedded into structured data such as temperature, vorticity, and...

6.9AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/23 7:33 a.m.•21 views

CVE-2024-22146

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Magazine3 Schema & Structured Data for WP & AMP allows Stored XSS.This issue affects Schema & Structured Data for WP & AMP: from n/a through 1.25...

6.5CVSS6.7AI score0.0034EPSS
SaveExploits0References1
Rows per page
Query Builder