CVE-2025-9512

MediumCVSS 6.1

Published: 01/10/2025(UTC)Updated: 09/10/2026(UTC)Translated: 09/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

16th percentile - higher than 16% of all known CVEs

Summary

The Schema & Structured Data for WP & AMP WordPress plugin before 1.50 does not properly handle HTML tag attribute modifications, making it possible for unauthenticated attackers to conduct Stored XSS attacks via post comments.

Risk Assessment

An unauthenticated attacker can persistently inject malicious script via comments that executes in users' browsers. This may result in session data theft or account takeover.

Recommendation

Update the Schema & Structured Data for WP & AMP plugin to version 1.50 or later. Until then, consider restricting commenting capabilities.

Other vulnerabilities in Schema & Structured Data for WP & AMP WordPress plugin

CVE-2026-96570High
The Schema & Structured Data for WP & AMP plugin (versions up to and including 1.67) is vulnerable to stored cross-site scripting via the 'saswp_review_text' parameter. Insufficient input sanitization and output escaping allows an unauthenticated attacker to inject arbitrary web scripts that execute when a user visits the injected page. The nonce, the only authorization gate, is publicly printed in the shortcode HTML, making it ineffective.

Original NVD description (English source)

The Schema & Structured Data for WP & AMP WordPress plugin before 1.50 does not properly handles HTML tag attribute modifications, making it possible for unauthenticated attackers to conduct Stored XSS attacks via post comments.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS