5 matches found
CVE-2023-49819
The Structured Content (JSON-LD) WordPress plugin (versions
CVE-2023-49820
CVE-2023-49820 is a stored XSS vulnerability in the WordPress plugin Structured Content (JSON-LD) #wpsc. Affected versions are
CVE-2025-0512
CVE-2025-0512 affects the WordPress plugin Structured Content (JSON-LD) #wpsc . The vulnerability is a stored XSS in the shortcodes sc_fs_local_business, exploitable on pages with user-supplied attributes. Affected versions are up to and including 6.4.5. The exposure requires attacker access at c...
CVE-2022-4715
The CVE concerns The Structured Content WordPress plugin, prior to version 1.5.1. The vulnerability stems from not validating/escaping certain shortcode attributes before echoing them, enabling Stored XSS when a user with as little as a contributor role views a page, potentially affecting higher-...
CVE-2024-24839
CVE-2024-24839 affects the WordPress plugin "Structured Content (JSON-LD)" (formerly known as Structured Content, wpsc). The issue is an authenticated Stored XSS (Contributor+ and above) via the plugin’s Classic Editor Shortcode, due to improper input sanitization/output escaping for JSON-LD cont...