Lucene search
+L

155 matches found

OSV
OSV
•added 2025/10/22 3:15 p.m.•13 views

CVE-2025-49923

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows DOM-Based XSS.This issue affects Seriously Simple Podcasting: from n/a through = 3.11.1...

6.1CVSS5.8AI score0.00225EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/22 3:15 p.m.•23 views

CVE-2025-49923

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows DOM-Based XSS.This issue affects Seriously Simple Podcasting: from n/a through = 3.11.1...

5.9CVSS0.00225EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/22 2:32 p.m.•31 views

CVE-2025-49923 WordPress Seriously Simple Podcasting plugin <= 3.11.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows DOM-Based XSS.This issue affects Seriously Simple Podcasting: from n/a through = 3.11.1...

5.9CVSS0.00225EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/22 2:32 p.m.•8 views

CVE-2025-49923 WordPress Seriously Simple Podcasting plugin <= 3.11.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows DOM-Based XSS.This issue affects Seriously Simple Podcasting: from n/a through = 3.11.1...

5.9CVSS5.8AI score0.00225EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/22 2:32 p.m.•31 views

CVE-2025-49923

CVE-2025-49923 affects the WordPress plugin Seriously Simple Podcasting (versions up to and including 3.11.1). The vulnerability is a DOM-Based XSS caused by improper input handling during web page generation. Public descriptions consistently cite DOM-based XSS with no exploitation status; Red Ha...

5.9CVSS5.8AI score0.00225EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/10/22 12:00 a.m.•20 views

PT-2025-43187

Name of the Vulnerable Software and Affected Versions Seriously Simple Podcasting versions through 3.11.1 Description The software contains a flaw related to improper input handling during web page creation, which allows for Cross-site Scripting XSS. This specific instance is a DOM-Based XSS issu...

6.1CVSS5.8AI score0.00225EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/22 12:00 a.m.•2 views

CVE-2025-49923: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows DOM-Based XSS.This issue affects Seriously Simple Podcasting: from n/a through = 3.11.1...

5.9CVSS5.8AI score0.00225EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2022-43450

Malicious code in bioql PyPI...

5.4CVSS5.1AI score0.00373EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2023-49323

Malicious code in bioql PyPI...

9.8CVSS9AI score0.0055EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2025-12075

Malicious code in bioql PyPI...

5.9CVSS6.9AI score0.00277EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2023-49327

Malicious code in bioql PyPI...

7.1CVSS6.9AI score0.00379EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2024-22927

Malicious code in bioql PyPI...

7.1CVSS8.5AI score0.00426EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/08/05 1:59 p.m.•14 views

WordPress Seriously Simple Podcasting plugin <= 3.11.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by 63n0 in WordPress Plugin Seriously Simple Podcasting versions = 3.11.1...

6.1CVSS6.1AI score0.00225EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2025/06/12 10:42 a.m.•16 views

WordPress Seriously Simple Podcasting plugin <= 3.13.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nguyen Tran Tuan Dung domiee13 in WordPress Plugin Seriously Simple Podcasting versions = 3.13.0...

4.3CVSS7AI score0.00236EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/05/23 8:43 a.m.•23 views

CVE-2024-3751

The Seriously Simple Podcasting WordPress plugin before 3.3.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS5.7AI score0.00455EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 8:13 a.m.•17 views

CVE-2024-9667

The Seriously Simple Podcasting plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 3.5.0. This makes it possible for unauthenticated attackers to inject arbitrary web...

6.1CVSS5.6AI score0.00401EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 10:52 p.m.•19 views

CVE-2022-4571

The Seriously Simple Podcasting WordPress plugin before 2.19.1 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used agains...

5.4CVSS5.9AI score0.00534EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2025/04/26 5:35 p.m.•19 views

CVE-2025-46261

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Stored XSS.This issue affects Seriously Simple Podcasting: from n/a through = 3.9.0...

5.9CVSS7.2AI score0.00277EPSS
SaveExploits0References1
OSV
OSV
•added 2025/04/24 4:15 p.m.•16 views

CVE-2025-46261

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Craig Hewitt Seriously Simple Podcasting allows Stored XSS. This issue affects Seriously Simple Podcasting: from n/a through 3.9.0...

4.8CVSS5.8AI score0.00277EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/24 4:15 p.m.•23 views

CVE-2025-46261

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Stored XSS.This issue affects Seriously Simple Podcasting: from n/a through = 3.9.0...

5.9CVSS0.00277EPSS
SaveExploits0References1
Rows per page
Query Builder