Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Product

Products as named in CPE, with their records.

Published
2 selected

1 record

Vendor: Terakoya Component: Markup (json-ld) Structured In Schema.org Clear all filters
TI-2022-04264 CVE-2022-4666 · GHSA-w97g-gphp-c9mr

Markup <= 4.8.1 - Contributor+ Stored XSS via Shortcode

Priority MEDIUM 58

The Markup (JSON-LD) structured in schema.org WordPress plugin through 4.8.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which co…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00471 Published 2023-02-21 No fix listed