CVE-2018-20121

Description

References

• packetstormsecurity.com/files/151333/Podcast-Generator-2.7-Cross-Site-Scripting.html · Third Party Advisory
• seclists.org/fulldisclosure/2019/Jan/63 · Mailing List
• albertobeta/PodcastGenerator · Third Party Advisory
• netsparker.com/web-applications-advisories/ns-18-051-stored-cross-site-scripting-in-podcastgenerator · Exploit

More vulnerabilities in podcast generator

• CVE-2025-70336MEDIUM 4.8A Stored cross-site scripting (XSS) vulnerability in 'Create New Live Item' in PodcastGenerator 3.2.9 allows remote attackers to inject arbi…
• CVE-2023-53920MEDIUM 5.4PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the podcast title field accessible through the podcast detail…
• CVE-2023-53919MEDIUM 5.4PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the Freebox content field accessible through the theme custom…
• CVE-2023-53918MEDIUM 6.1PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the episode title field accessible through the episodes uploa…
• CVE-2023-53899CRITICAL 9.8PodcastGenerator 3.2.9 contains a blind server-side request forgery vulnerability that allows attackers to inject XML in the episode upload …