A vulnerability was found in Yoast SEO Plugin up to 26.8 on WordPress. It has been classified as problematic. Affected is an unknown function of the component Block Attribute Handler. This manipulation of the argument yoast-schema causes cross site scripting.
The identification of this vulnerability is CVE-2026-1293. It is possible to initiate the attack remotely. There is no exploit available.
