aryasahil96-manu/CVE-Disclosures

aryasahil96-manu/CVE-Disclosures

GitHubGitHub
GitHubgithub.com
Releases0
My CVEs
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-70336↗
4.8 MEDIUM—

A Stored cross-site scripting (XSS) vulnerability in 'Create New Live Item' in PodcastGenerator 3.2.9 allows remote attackers to inject arbitrary script or HTML via the 'TITLE', 'SHORT DESCRIPTION' and 'LONG DESCRIPTION' parameters. The saved payload gets executed on 'View All Live Items' and 'Live Stream' pages.