CVE-2026-97319

Name of the Vulnerable Software and Affected Versions PowerPress Podcasting versions prior to 11.17.2

Description Insufficient sanitization and escaping of a block attribute before it is output on a page allows users with the contributor role and above to execute Stored Cross-Site Scripting attacks. Stored Cross-Site Scripting is a type of attack where malicious scripts are permanently stored on the target server.

Recommendations Update to version 11.17.2 or later.