5.9
Medium
CVE-2025-49923 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Craig Hewitt…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows DOM-Based XSS.This issue affects Seriously Simple Podcasting: from n/a through <= 3.11.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Seriously Simple Podcasting 3.11 | earliest → 3.11.1 | No fix stated |
Other CVEs of Seriously Simple Podcasting
The 10 CVEs of Seriously Simple Podcasting →
CVE-2026-39505
Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows…
5.3
Medium
CVE-2026-24952
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Craig Hewitt…
6.5
Medium
CVE-2026-24360
Server-Side Request Forgery (SSRF) vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting…
4.4
Medium
CVE-2025-66059
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Craig Hewitt Seriously…
5.3
Medium