CVE-2025-70336

Published January 28th, 2026

View on NVD ↗

CVSS v3

4.8

MEDIUM

CVSS v2

N/A

Affected

PROJECTS

Description

A Stored cross-site scripting (XSS) vulnerability in 'Create New Live Item' in PodcastGenerator 3.2.9 allows remote attackers to inject arbitrary script or HTML via the 'TITLE', 'SHORT DESCRIPTION' and 'LONG DESCRIPTION' parameters. The saved payload gets executed on 'View All Live Items' and 'Live Stream' pages.

PodcastGenerator/PodcastGenerator

Open Source Podcast Publishing Solution (2006–2026)

GitHub

624

aryasahil96-manu/CVE-Disclosures

My CVEs

GitHub