Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2024-9230

PowerPress Podcasting < 11.9.18 - Author+ XSS via Podcast URL

Description

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.9.18 does not sanitise and escape some of its settings when adding a podcast, which could allow author and above users to perform Stored Cross-Site Scripting attacks

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown PowerPress Podcasting plugin by Blubrry

Default version status: unaffected

  • 0 to < 11.9.18affected

References