Veille CVE

Recherche « Podcastgenerator Podcast Generator »

1 CVE

  1. CVE-2021-47968 6.4 Moyenne

    Podcastgenerator Podcast Generator

    Podcast Generator 3.1 is vulnerable to persistent cross-site scripting, allowing authenticated attackers to inject malicious scripts by submitting unfiltered JavaScript code in the long_description parameter. Attackers can inject script tags through episode creation or editing requests to execute arbitrary JavaScript when other users view the episode details.