CVE-2018-20121

Podcast Generator 2.7 has stored cross-site scripting (XSS) via the URL addcategory parameter.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2019-03-21

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Podcast Generator (Podcastgenerator)

References

• http://packetstormsecurity.com/files/151333/Podcast-Generator-2.7-Cross-Site-Scripting.html
• http://seclists.org/fulldisclosure/2019/Jan/63
• https://github.com/albertobeta/PodcastGenerator/commits/master
• https://www.netsparker.com/web-applications-advisories/ns-18-051-stored-cross-site-scripting-in-podcastgenerator/