Unscored CVE-2021-24743 EUVD-2021-11655GHSA-8m82-w6wf-gfjx

Podcast Subscribe Buttons < 1.4.2 - Contributor+ Stored XSS

Published Oct 18, 2021 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The Podcast Subscribe Buttons WordPress plugin before 1.4.2 allows users with any role capable of editing or adding posts to perform stored XSS.

Vendor	Product	Affected	Fixed
—	Podcast Subscribe Buttons	1.4.2 – < 1.4.2	1.4.2