CVE-2018-20121

2019-03-2116:00:34

Google

osv.dev

5.7 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.7%

Podcast Generator 2.7 has stored cross-site scripting (XSS) via the URL addcategory parameter.

CPENameOperatorVersion
podcastgeneratoreq2.6
podcastgeneratoreq2.5
podcastgeneratoreq2.7

Name	Operator	Version
podcastgenerator	eq	2.6
podcastgenerator	eq	2.5
podcastgenerator	eq	2.7

References

packetstormsecurity.com/files/151333/Podcast-Generator-2.7-Cross-Site-Scripting.html

seclists.org/fulldisclosure/2019/Jan/63

github.com/albertobeta/PodcastGenerator/commits/master

www.netsparker.com/web-applications-advisories/ns-18-051-stored-cross-site-scripting-in-podcastgenerator/