PT-2026-5134 · Unknown · Podcast Generator
CVE-2025-70336
·
Published
2026-01-28
·
Updated
2026-02-09
CVSS v3.1
4.8
Medium
| Vector | AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
PodcastGenerator version 3.2.9
Description
A stored cross-site scripting (XSS) issue exists in the 'Create New Live Item' functionality. This allows remote attackers to inject arbitrary script or HTML through the
TITLE, SHORT DESCRIPTION, and LONG DESCRIPTION parameters. The injected payload is executed when accessing the 'View All Live Items' and 'Live Stream' pages.Recommendations
Update to a newer version that contains a fix for this vulnerability.
Exploit
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Podcast Generator