Read the docs

Gordon Böhme, Antonio Leutsch

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Gordon Böhme, Antonio Leutsch records in CISA KEV

No Gordon Böhme, Antonio Leutsch vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Structured Content 5 records HIGH

Records

6 records

TI-2022-04311 CVE-2022-4715 · GHSA-r953-7653-mvj6

Structured Content < 1.5.1 - Contributor+ Stored XSS in Shortcode

Priority HIGH 66

The Structured Content WordPress plugin before 1.5.1 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to per…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00476 Published 2023-01-23 Fixed in 1.5.1
TI-2024-16356 CVE-2024-24839 · GHSA-75pw-9w79-3j7q

WordPress Structured Content Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gordon Böhme, Antonio Leutsch Structured Content (JSON-LD) #wpsc allows Stored XSS.This issue affects Structured Conte…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00317 Published 2024-02-05 No fix listed CWE-79
TI-2023-27224 CVE-2023-49820 · GHSA-j6vh-6qq8-qh37

WordPress Structured Content Plugin <= 1.5.3 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gordon Böhme, Antonio Leutsch Structured Content (JSON-LD) #wpsc allows Stored XSS.This issue affects Structured Conte…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00385 Published 2023-12-14 No fix listed CWE-79
TI-2025-00426 CVE-2025-0512 · GHSA-5q7f-8qjj-x7gj

Cross-site scripting in gorbo Structured Content #wpsc

Priority LOW 28

The Structured Content (JSON-LD) #wpsc plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sc_fs_local_business shortcode in all versions up to, and including, 6.4.5 due to insufficient inp…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00283 Published 2025-03-04 No fix listed CWE-79
TI-2024-28959 CVE-2024-43307 · GHSA-28f7-mc45-4x8m

WordPress Structured Content (JSON-LD) #wpsc plugin <= 1.6.2 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Gordon Böhme, Antonio Leutsch Structured Content allows Stored XSS.This issue affects Structured Content: from…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0026 Published 2024-08-18 No fix listed CWE-79
Open these records in search →