Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5q67-5hpv-7q5r

Опубликовано: 14 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.9

Описание

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.9.18 does not sanitise and escape some of its settings when adding a podcast, which could allow author and above users to perform Stored Cross-Site Scripting attacks

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.9.18 does not sanitise and escape some of its settings when adding a podcast, which could allow author and above users to perform Stored Cross-Site Scripting attacks

EPSS

Процентиль: 19%
0.0006
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.9
nvd
10 месяцев назад

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.9.18 does not sanitise and escape some of its settings when adding a podcast, which could allow author and above users to perform Stored Cross-Site Scripting attacks

EPSS

Процентиль: 19%
0.0006
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-79