CVE 6.1 MEDIUM

Schema & Structured Data for WP & AMP < 1.50 - Unauthenticated Stored-XSS_CVE-2025-9512

6.1 / 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

The Schema & Structured Data for WP & AMP WordPress plugin before 1.50 does not properly handles HTML tag attribute modifications, making it possible for unauthenticated attackers to conduct Stored XSS attacks via post comments.

Basic Information

ID CVE-2025-9512
Source WPScan
Published Oct 1, 2025 at 06:00
Modified Oct 1, 2025 at 14:59

Affected Product

Vendor Unknown
Product Schema & Structured Data for WP & AMP
Affected Versions Unknown Schema & Structured Data for WP & AMP 0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.