Lucene search
WpvulndbWPVDB-ID:DFD3DC0F-6658-4E8E-BD86-4BAAAD71D3ABHistoryFeb 03, 2023 - 12:00 a.m.
Podlove Podcast Publisher < 3.8.3 - Admin+ Stored XSS
2023-02-0300:00:00
wpscan.com
5
podlove podcast publisher
stored xss
plugin security
0.001 Low
EPSS
Percentile
21.0%
The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
| CPE | Name | Operator | Version |
|---|---|---|---|
| podlove-podcasting-plugin-for-wordpress | lt | 3.8.3 |
Related
cvelist
cvelist
cve
cve
CVE-2023-25046
2023-04-07 10:15:07
prion
prion
Cross site scripting
2023-04-07 10:15:00
osv
osv
CVE-2023-25046
2023-04-07 10:15:07
nvd
nvd
CVE-2023-25046
2023-04-07 10:15:07
wordfence
wordfence