← CVE Intelligence

CVE-2025-9512

Schema & Structured Data for WP & AMP < 1.50 - Unauthenticated Stored-XSS PUBLISHED

Description (CNA)

The Schema & Structured Data for WP & AMP WordPress plugin before 1.50 does not properly handles HTML tag attribute modifications, making it possible for unauthenticated attackers to conduct Stored XSS attacks via post comments.

Affected (CNA)

Vendor / productVersions
Unknown / Schema & Structured Data for WP & AMPaffected 0 before 1.50

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.