CVE-2024-22146mediumCWE-79

CVE-2024-22146: falha de média gravidade em Magazine3 Schema & Structured Data for WP & AMP

WordPress Schema & Structured Data for WP & AMP Plugin <= 1.25 is vulnerable to Cross Site Scripting (XSS)

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Schema & Structured Data for WP & AMP

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.5epss 0.3%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magazine3 Schema & Structured Data for WP & AMP allows Stored XSS.This issue affects Schema & Structured Data for WP & AMP: from n/a through 1.25.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Produtos afetados
Magazine3 · Schema & Structured Data for WP & AMP
CVEs relacionadas — Magazine3 Schema & Structured Data for WP & AMP

No mesmo produto, das mais perigosas para as menos.

CVE-2024-49683MEDIUMWordPress Schema & Structured Data for WP & AMP plugin <= 1.3.5 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2023-51677MEDIUMWordPress Schema & Structured Data for WP & AMP Plugin <= 1.23 is vulnerable to Cross Site Scripting (XSS)EPSS 0.3%CVE-2026-97291HIGHWordPress Schema & Structured Data for WP & AMP plugin <= 1.66 - PHP Object Injection vulnerabilityEPSS 0.3%