What is GHSA-rpqp-cp85-47rm?

GHSA-rpqp-cp85-47rm is a security advisory published by GitHub Security Advisories with Medium severity. The Schema \u0026 Structured Data for WP \u0026 AMP WordPress plugin before 1.70 does not safely encode its...

Which CVE IDs does GHSA-rpqp-cp85-47rm cover?

GHSA-rpqp-cp85-47rm covers the following CVE IDs: CVE-2026-119035. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-rpqp-cp85-47rm?

GHSA-rpqp-cp85-47rm has a CVSS v3 base score of 6.4, published by GitHub Security Advisories.

GHSA-rpqp-cp85-47rmMediumCVSS 6.4

The Schema & Structured Data for WP & AMP WordPress plugin before 1.70 does not safely encode its...

Vendor

GitHub Security Advisories

Published

November 11, 2026

Last Modified

November 11, 2026

🔗 CVE IDs covered (1)

CVE-2026-119035 →

📋 Description

The Schema & Structured Data for WP & AMP WordPress plugin before 1.70 does not safely encode its structured data output when the Pretty Print option is enabled, allowing users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks when the site maps a schema property to a custom field.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-119035
https://wpscan.com/vulnerability/f8fb358e-e0aa-4a4d-a4d0-b6f383b115a2
https://github.com/advisories/GHSA-rpqp-cp85-47rm