Skip to content
OpenAdvisories

Vendor

Podcastgenerator

5 known vulnerabilities.

4 results · Clear filters · Feed

  • Medium 6.4

    Podcast Generator 3.1 Persistent Cross-Site Scripting via long_description

    Podcast Generator 3.1 is vulnerable to persistent cross-site scripting, allowing authenticated attackers to inject malicious scripts by submitting unfiltered JavaScript code in the long_description parameter. Attackers can inject script tags through episode c…

  • Medium 5.4

    PodcastGenerator Stored Cross-Site Scripting via Freebox Content Field

    PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the Freebox content field accessible through the theme customization interface (theme_freebox.php). Malicious JavaScript payloads injected into the Freebox content execute when use…

  • Medium 5.4

    PodcastGenerator Stored Cross-Site Scripting via Podcast Title Field

    PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the podcast title field accessible through the podcast details interface (podcast_details.php). Malicious JavaScript payloads injected into the podcast title execute when users vis…

  • Medium 6.1

    PodcastGenerator Stored Cross-Site Scripting via Episode Title Field

    PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the episode title field accessible through the episodes upload interface (episodes_upload.php). Malicious JavaScript payloads injected into episode titles execute when administrato…