Description
PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the episode title field accessible through the episodes upload interface (episodes_upload.php). Malicious JavaScript payloads injected into episode titles execute when administrators view the episodes list page (episodes_list.php).
Remediation
References
Related Vulnerabilities
Oracle Database Server Incorrect Authorization Vulnerability (CVE-2025-30750)
WordPress Plugin WordPress Download Manager Remote Code Execution (2.7.4)
Moodle Other Vulnerability (CVE-2004-0725)
Internet Information Services Other Vulnerability (CVE-1999-0281)
Liferay Portal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-26271)