3 matches found
CVE-2023-49820
CVE-2023-49820 is a stored XSS vulnerability in the WordPress plugin Structured Content (JSON-LD) #wpsc. Affected versions are
CVE-2025-0512
CVE-2025-0512 affects the WordPress plugin Structured Content (JSON-LD) #wpsc . The vulnerability is a stored XSS in the shortcodes sc_fs_local_business, exploitable on pages with user-supplied attributes. Affected versions are up to and including 6.4.5. The exposure requires attacker access at c...
CVE-2024-24839
CVE-2024-24839 affects the WordPress plugin "Structured Content (JSON-LD)" (formerly known as Structured Content, wpsc). The issue is an authenticated Stored XSS (Contributor+ and above) via the plugin’s Classic Editor Shortcode, due to improper input sanitization/output escaping for JSON-LD cont...