Beveiligingsadvies
CVE-2021-47968
CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations
Beschrijving
Podcast Generator 3.1 is vulnerable to persistent cross-site scripting, allowing authenticated attackers to inject malicious scripts by submitting unfiltered JavaScript code in the long_description parameter. Attackers can inject script tags through episode creation or editing requests to execute arbitrary JavaScript when other users view the episode details.