Lucene search
+L

5 matches found

NVD
NVD
•added 2026/08/04 7:16 a.m.•25 views

CVE-2026-16293

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.16.11 does not sanitise and escape some of its Podcast Episode settings, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is...

6.8CVSS0.00431EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/04 6:00 a.m.•22 views

EUVD-2026-52596

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.16.11 does not sanitise and escape some of its Podcast Episode settings, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is...

6.8CVSS5.5AI score0.00431EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/08/04 6:00 a.m.•16 views

CVE-2026-16293

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.16.11 does not sanitise and escape some of its Podcast Episode settings, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is...

5.5AI score0.00431EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/04 12:00 a.m.•1 views

CVE-2026-16293: Improper Neutralization of Input During Web Page Generation

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.16.11 does not sanitise and escape some of its Podcast Episode settings, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is...

6.8CVSS5.9AI score0.00431EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/04 12:00 a.m.•25 views

PT-2026-67659

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.16.11 does not sanitise and escape some of its Podcast Episode settings, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks even when the unfiltered html capability is...

5.5AI score0.00431EPSS
SaveExploits0References2
Rows per page
Query Builder