CVE-2018-20121

概要

参考情報

• packetstormsecurity.com/files/151333/Podcast-Generator-2.7-Cross-Site-Scripting.html · Third Party Advisory
• seclists.org/fulldisclosure/2019/Jan/63 · Mailing List
• albertobeta/PodcastGenerator · Third Party Advisory
• netsparker.com/web-applications-advisories/ns-18-051-stored-cross-site-scripting-in-podcastgenerator · Exploit

podcast generator のその他の脆弱性

• CVE-2025-70336中 4.8A Stored cross-site scripting (XSS) vulnerability in 'Create New Live Item' in PodcastGenerator 3.2.9 allows remote attackers to inject arbi…
• CVE-2023-53920中 5.4PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the podcast title field accessible through the podcast detail…
• CVE-2023-53919中 5.4PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the Freebox content field accessible through the theme custom…
• CVE-2023-53918中 6.1PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the episode title field accessible through the episodes uploa…
• CVE-2023-53899緊急 9.8PodcastGenerator 3.2.9 contains a blind server-side request forgery vulnerability that allows attackers to inject XML in the episode upload …