CVE-2021-47968

Podcast Generator 3.1 Persistent Cross-Site Scripting via long_description

CVSS 5.1 MEDIUMEPSS 0.2%CWE-79

Podcast Generator 3.1 is vulnerable to persistent cross-site scripting, allowing authenticated attackers to inject malicious scripts by submitting unfiltered JavaScript code in the long_description parameter. Attackers can inject script tags through episode creation or editing requests to execute arbitrary JavaScript when other users view the episode details.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

Affected products

Podcastgenerator · Podcast Generator

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/49866unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://podcastgenerator.net/demoV2/https://podcastgenerator.net/download https://www.exploit-db.com/exploits/49866 https://www.vulncheck.com/advisories/podcast-generator-persistent-cross-site-scripting-via-long-description