Medium · 6.5 CVE-2025-32690 EUVD-2025-10563GHSA-93wv-g9pq-74g3

WordPress PowerPress Podcasting plugin <= 11.12.5 - Cross Site Scripting (XSS) Vulnerability

Published Apr 9, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: blubrry Product: PowerPress Podcasting

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in blubrry PowerPress Podcasting powerpress allows DOM-Based XSS.This issue affects PowerPress Podcasting: from n/a through <= 11.12.5.

Affected products

Vendor	Product	Affected	Fixed
blubrry	PowerPress Podcasting	≤ 11.12.5	—

References

https://patchstack.com/database/Wordpress/Plugin/powerpress/vulnerability/wordpress-powerpress-podcasting-11-12-4-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry