Threats tagged 'ghsa-hr62-g3v7-mq7g'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.4	CVE-2025-12118The Schema Scalpel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post title in all Medium6.42025-11-01GCVE DatabaseCVE-2025-12118 The Schema Scalpel WordPress plugin versions up to and including 1.6.1 contain a stored cross-site scripting (XSS) vulnerability via the post title. This vulnerability arises from insufficient input sanitization and output escaping when user-supplied data is embedded into JSON-LD schema markup. Authenticated users with Contributor-level permissions or higher can exploit this to inject malicious scripts that execute when other users view the affected pages. Report on CVE-2025-12118 Vulnerability CWE-79 #ghsa-hr62-g3v7-mq7g	GCVE Database	2025-11-01

Page 1 of 1