CVE-2023-5308

CVE-2023-5308 refers to the WordPress plugin Podcast Subscribe Buttons. The vulnerability is a Stored Cross-Site Scripting (XSS) via the podcast_subscribe shortcode, present in versions up to and including 1.4.8, caused by insufficient input sanitization and output escaping on user-supplied attri...

CVE-2021-24743

The CVE-2021-24743 entry concerns the WordPress Podcast Subscribe Buttons plugin (versions prior to 1.4.2). Affected component: plugin code handling post edits/adds. Root cause: lack of input sanitization leading to stored XSS when users with post-editing capabilities submit data. Impact is store...