5.9
Medium
CVE-2025-46261 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Craig Hewitt…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Stored XSS.This issue affects Seriously Simple Podcasting: from n/a through <= 3.9.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Seriously Simple Podcasting 3.9 | earliest → 3.9.0 | No fix stated |
Other CVEs of Seriously Simple Podcasting
The 10 CVEs of Seriously Simple Podcasting →
CVE-2026-39505
Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows…
5.3
Medium
CVE-2026-24952
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Craig Hewitt…
6.5
Medium
CVE-2026-24360
Server-Side Request Forgery (SSRF) vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting…
4.4
Medium
CVE-2025-66059
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Craig Hewitt Seriously…
5.3
Medium