CVE-2025-49923

MEDIUM 5.9CVE-2025-49923 · Published 22/10/2025 · updated 08/10/2026

In short

CVE-2025-49923 is a MEDIUM (CVSS 5.9) vulnerability affecting seriously simple podcasting (castos).
Chance of exploitation in the next 30 days (EPSS): 0.22%, higher than 13.2% of all vulnerabilities.
Fix: update to 3.12.0 or later.

Package	Affected versions	Patched versions
seriously simple podcasting castos	`< 3.12.0`	`3.12.0`

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows DOM-Based XSS.This issue affects Seriously Simple Podcasting: from n/a through <= 3.11.1.

References

patchstack.com/database/Wordpress/Plugin/seriously-simple-podcasting/vulnerability/wordpress-seriously-simple-podcasting-plugin-3-11-1-cross-site-scripting-xss-vulnerability

More vulnerabilities in seriously simple podcasting

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

seriously simple podcasting

castos

< 3.12.0

3.12.0

More vulnerabilities in seriously simple podcasting

See all →