Skip to content
Sign in
5.4 Medium

CVE-2025-3414 The Structured Content (JSON-LD) #wpsc WordPress plugin before 1.7.0 does not validate and escape some of its block…

Description

The Structured Content (JSON-LD) #wpsc WordPress plugin before 1.7.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

Affected products and versions

Product Affected versions Fixed in
Structured Content (JSON-LD) #wpsc 1.7 earliest → < 1.7.0 1.7.0

Other CVEs of Structured Content (JSON-LD) #wpsc

The 2 CVEs of Structured Content (JSON-LD) #wpsc →
CVE-2022-4715 The Structured Content WordPress plugin before 1.5.1 does not validate and escape some of its shortcode attributes… 5.4 Medium
Track this CVE