Product
The Schema & Structured Data for WP & AMP plugin is vulnerable to unauthenticated stored XSS via the 'saswp_review_text' parameter due to insufficient input sanitization and an exposed, ineffective nonce.