Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magazine3 Schema & Structured Data for WP & AMP allows Stored XSS.This issue affects Schema & Structured Data for WP & AMP: from n/a through 1.23.
References
Configurations
Configuration 1 (hide)
|
History
07 Feb 2024, 17:09
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.4 |
| First Time |
Structured-data-for-wp download Schema \& Structured Data For Wp \& Amp
Structured-data-for-wp |
|
| References | () https://patchstack.com/database/vulnerability/schema-and-structured-data-for-wp/wordpress-schema-structured-data-for-wp-amp-plugin-1-23-cross-site-scripting-xss-vulnerability?_s_id=cve - Third Party Advisory | |
| CPE | cpe:2.3:a:structured-data-for-wp:download_schema_\&_structured_data_for_wp_\&_amp:*:*:*:*:*:wordpress:*:* |
01 Feb 2024, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-02-01 11:15
Updated : 2024-02-28 20:54
NVD link : CVE-2023-51677
Mitre link : CVE-2023-51677
CVE.ORG link : CVE-2023-51677
JSON object : View
Products Affected
structured-data-for-wp
- download_schema_\&_structured_data_for_wp_\&_amp
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')