6.1
/ 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Description
The Schema & Structured Data for WP & AMP WordPress plugin before 1.50 does not properly handles HTML tag attribute modifications, making it possible for unauthenticated attackers to conduct Stored XSS attacks via post comments.
Basic Information
ID
CVE-2025-9512
Source
WPScan
Published
Oct 1, 2025 at 06:00
Modified
Oct 1, 2025 at 14:59
Affected Product
Vendor
Unknown
Product
Schema & Structured Data for WP & AMP
Affected Versions
Unknown Schema & Structured Data for WP & AMP 0