PT-2023-31373 · Unknown · Structured Content (Json-Ld) #Wpsc
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
Structured Content (JSON-LD) #wpsc versions 1.5.3 and earlier
Description
The issue is related to improper neutralization of input during web page generation, which can lead to Stored Cross-site Scripting (XSS). This allows attackers to inject malicious scripts into the application.
Recommendations
For versions 1.5.3 and earlier, update to a version that contains a fix for this issue.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Structured Content (Json-Ld) #Wpsc