Description
PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the podcast title field accessible through the podcast details interface (podcast_details.php). Malicious JavaScript payloads injected into the podcast title execute when users visit the application's home page.
Remediation
References
Related Vulnerabilities
WordPress Plugin OnePress Social Locker Multiple Cross-Site Scripting Vulnerabilities (4.2.0)
WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.27)
MySQL CVE-2022-21417 Vulnerability (CVE-2022-21417)
WordPress Plugin WR ContactForm SQL Injection (1.1.9)
WordPress Plugin Import any XML or CSV File to WordPress Arbitrary File Upload (3.6.7)