CVE-2023-25046

2023-04-0710:15:07

Google

osv.dev

podlove podcast publisher

xss

stored

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.0%

JSON

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Podlove Podlove Podcast Publisher plugin <= 3.8.2 versions.

CPENameOperatorVersion
podlove-publishereq2.7.16
podlove-publishereq2.11.4
podlove-publishereq3.1.13
podlove-publishereq2.7.6
podlove-publishereq2.8.8
podlove-publishereq3.0-beta25
podlove-publishereq2.8.1
podlove-publishereq2.0.4
podlove-publishereq1.10.12-alpha
podlove-publishereq2.3.5

Name	Operator	Version
podlove-publisher	eq	2.7.16
podlove-publisher	eq	2.11.4
podlove-publisher	eq	3.1.13
podlove-publisher	eq	2.7.6
podlove-publisher	eq	2.8.8
podlove-publisher	eq	3.0-beta25
podlove-publisher	eq	2.8.1
podlove-publisher	eq	2.0.4
podlove-publisher	eq	1.10.12-alpha
podlove-publisher	eq	2.3.5

Rows per page:

1-10 of 2761

References

patchstack.com/database/vulnerability/podlove-podcasting-plugin-for-wordpress/wordpress-podlove-podcast-publisher-plugin-3-8-2-cross-site-scripting-xss?_s_id=cve