Description
Podcast Generator 3.1 is vulnerable to persistent cross-site scripting, allowing authenticated attackers to inject malicious scripts by submitting unfiltered JavaScript code in the long_description parameter. Attackers can inject script tags through episode creation or editing requests to execute arbitrary JavaScript when other users view the episode details.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Podcastgenerator | Podcast Generator | < 3.1.1 | — |
References
- ExploitDB-49866 exploit
- Official Product Homepage product
- Product Reference product
- VulnCheck Advisory: Podcast Generator 3.1 Persistent Cross-Site Scripting via long_description third-party-advisory