CVE-2018-20121

Description

References

• packetstormsecurity.com/files/151333/Podcast-Generator-2.7-Cross-Site-Scripting.html · Third Party Advisory
• seclists.org/fulldisclosure/2019/Jan/63 · Mailing List
• albertobeta/PodcastGenerator · Third Party Advisory
• netsparker.com/web-applications-advisories/ns-18-051-stored-cross-site-scripting-in-podcastgenerator · Exploit

Mais vulnerabilidades de podcast generator

• CVE-2025-70336MÉDIO 4.8A Stored cross-site scripting (XSS) vulnerability in 'Create New Live Item' in PodcastGenerator 3.2.9 allows remote attackers to inject arbi…
• CVE-2023-53920MÉDIO 5.4PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the podcast title field accessible through the podcast detail…
• CVE-2023-53919MÉDIO 5.4PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the Freebox content field accessible through the theme custom…
• CVE-2023-53918MÉDIO 6.1PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the episode title field accessible through the episodes uploa…
• CVE-2023-53899CRÍTICO 9.8PodcastGenerator 3.2.9 contains a blind server-side request forgery vulnerability that allows attackers to inject XML in the episode upload …