The Schema & Structured Data for WP & AMP WordPress plugin before 1.50 does not properly handles HTML tag attribute modifications, making it possible for unauthenticated attackers to conduct Stored XSS attacks via post comments.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Wed, 01 Oct 2025 06:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The Schema & Structured Data for WP & AMP WordPress plugin before 1.50 does not properly handles HTML tag attribute modifications, making it possible for unauthenticated attackers to conduct Stored XSS attacks via post comments. | |
| Title | Schema & Structured Data for WP & AMP < 1.50 - Unauthenticated Stored-XSS | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: WPScan
Published:
Updated: 2025-10-01T06:00:02.967Z
Reserved: 2025-08-26T20:32:00.313Z
Link: CVE-2025-9512
Vulnrichment
No data.
NVD
Status : Received
Published: 2025-10-01T06:15:31.880
Modified: 2025-10-01T06:15:31.880
Link: CVE-2025-9512
Redhat
No data.
OpenCVE Enrichment
No data.