CVE-2025-0512

CVE-2025-0512 affects the WordPress plugin Structured Content (JSON-LD) #wpsc . The vulnerability is a stored XSS in the shortcodes sc_fs_local_business, exploitable on pages with user-supplied attributes. Affected versions are up to and including 6.4.5. The exposure requires attacker access at c...

CVE-2022-4715

The CVE concerns The Structured Content WordPress plugin, prior to version 1.5.1. The vulnerability stems from not validating/escaping certain shortcode attributes before echoing them, enabling Stored XSS when a user with as little as a contributor role views a page, potentially affecting higher-...