3 matches found
CVE-2014-4544
Cross-site scripting XSS vulnerability in the Podcast Channels plugin 0.20 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the Filename parameter to getid3/demos/demo.write.php...
CVE-2014-4544
Cross-site scripting XSS vulnerability in the Podcast Channels plugin 0.20 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the Filename parameter to getid3/demos/demo.write.php...
PT-2019-7114
Name of the Vulnerable Software and Affected Versions Podcast Channels plugin versions 0.20 and earlier for WordPress Description The issue allows remote attackers to inject arbitrary web script or HTML via the Filename parameter to "getid3/demos/demo.write.php" API endpoint. This is a cross-site...