{"id":19004690,"date":"2026-08-27T14:46:15","date_gmt":"2026-08-27T14:46:15","guid":{"rendered":"https:\/\/wordpress.org\/support\/?post_type=topic&p=19004690"},"modified":"2026-08-27T14:58:48","modified_gmt":"2026-08-27T14:58:48","slug":"security-issue-stored-cross-site-scripting-via-multiple-shortcodes","status":"publish","type":"topic","link":"https:\/\/wordpress.org\/support\/topic\/security-issue-stored-cross-site-scripting-via-multiple-shortcodes\/","title":{"rendered":"Security issue: Stored Cross-Site Scripting via Multiple Shortcodes"},"content":{"rendered":"\n

Hi there,<\/p>\n\n\n\n

there is a security issue found by WordFence regarding this plugin. Here is more information about the found issue: https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/g-business-reviews-rating\/reviews-and-rating-google-reviews-510-authenticated-contributor-stored-cross-site-scripting-via-multiple-shortcodes<\/a><\/p>\n\n\n\n

Is there an update planned regarding this issue? Thanks in advance for any information.<\/p>\n","protected":false},"template":"","class_list":["post-19004690","topic","type-topic","status-publish","hentry","topic-tag-cross-site-scripting","topic-tag-security-issue"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/19004690","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic"}],"about":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":1,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/19004690\/revisions"}],"predecessor-version":[{"id":19004707,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/19004690\/revisions\/19004707"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/media?parent=19004690"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}