6.5
Moyenne
CVE-2026-24952 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Craig Hewitt…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Stored XSS.This issue affects Seriously Simple Podcasting: from n/a through <= 3.14.1.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Seriously Simple Podcasting 3.14 | premières → 3.14.1 | Pas de correctif indiqué |
Autres CVE de Seriously Simple Podcasting
Les 10 CVE de Seriously Simple Podcasting →
CVE-2026-39505
Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows…
5.3
Moyenne
CVE-2026-24360
Server-Side Request Forgery (SSRF) vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting…
4.4
Moyenne
CVE-2025-66059
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Craig Hewitt Seriously…
5.3
Moyenne
CVE-2025-66060
Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows…
5.3
Moyenne