Lucene search
+L
Wpsc-pluginStructured Content

1 matches found

CVE
CVE
added 2024/02/05 6:31 a.m.48 views

CVE-2024-24839

CVE-2024-24839 affects the WordPress plugin "Structured Content (JSON-LD)" (formerly known as Structured Content, wpsc). The issue is an authenticated Stored XSS (Contributor+ and above) via the plugin’s Classic Editor Shortcode, due to improper input sanitization/output escaping for JSON-LD cont...

6.5CVSS6.7AI score0.00317EPSS
Save