Description
PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the podcast title field accessible through the podcast details interface (podcast_details.php). Malicious JavaScript payloads injected into the podcast title execute when users visit the application's home page.
Remediation
References
Related Vulnerabilities
WordPress 4.5.x Multiple Vulnerabilities (4.5 - 4.5.27)
MediaWiki Other Vulnerability (CVE-2004-1405)
WordPress Plugin The Holiday Calendar Cross-Site Scripting (1.11.2)
WordPress Plugin Image Metadata Cruncher Multiple Vulnerabilities (1.8)
WordPress Plugin Essential Real Estate Cross-Site Scripting (1.7.0)