πŸ” CVE Alert

CVE-2021-47968

MEDIUM 6.4

Podcast Generator 3.1 Persistent Cross-Site Scripting via long_description

CVSS Score
6.4
EPSS Score
0.0%
EPSS Percentile
0th

Podcast Generator 3.1 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting unfiltered JavaScript code in the long_description parameter. Attackers can inject script tags through episode creation or editing requests to execute arbitrary JavaScript when other users view the episode details.

CWE CWE-79
Vendor podcastgenerator
Product podcast generator
Published May 15, 2026
Last Updated May 15, 2026
Stay Ahead of the Next One

Get instant alerts for podcastgenerator podcast generator

Be the first to know when new medium vulnerabilities affecting podcastgenerator podcast generator are published β€” delivered to Slack, Telegram or Discord.

Get Free Alerts β†’ Free Β· No credit card Β· 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Changed
Confidentiality
None
Integrity
None
Availability
None

Affected Versions

Podcastgenerator / Podcast Generator
< 3.1.1

References

NVD β†— CVE.org β†— EPSS Data β†—
exploit-db.com: https://www.exploit-db.com/exploits/49866 podcastgenerator.net: https://podcastgenerator.net/demoV2/ podcastgenerator.net: https://podcastgenerator.net/download vulncheck.com: https://www.vulncheck.com/advisories/podcast-generator-persistent-cross-site-scripting-via-long-description

Credits

Ayşenur KARAASLAN