Description
The Schema & Structured Data for WP & AMP WordPress plugin before 1.50 does not properly handles HTML tag attribute modifications, making it possible for unauthenticated attackers to conduct Stored XSS attacks via post comments.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Schema & Structured Data for WP & AMP | < 1.50 | 1.50 |
References
- https://wpscan.com/vulnerability/e45d9335-3665-4155-abdf-9eeea250f1ba/ exploit vdb-entry technical-description