CVE-2018-20121

NONE EPSS 72.5%
Published Mar 21, 20197y ago · Modified Jun 17, 20262w ago
Find Similar
Published Mar 21, 2019 7y ago
Last Modified Jun 17, 2026 2w ago

Description

Podcast Generator 2.7 has stored cross-site scripting (XSS) via the URL addcategory parameter.

Threat Intelligence

EPSS Exploit Probability
72.5% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available

Weaknesses 1

CWE-79 Cross-site Scripting Injection

Affected Products 1

VendorProductVersionRange
podcastgeneratorpodcast_generator2.7any

References 4

  • packetstormsecurity.com http://packetstormsecurity.com/files/151333/Podcast-Generator-2.7-Cross-Site-Scripting.html
    Third Party AdvisoryVDB Entry
  • seclists.org http://seclists.org/fulldisclosure/2019/Jan/63
    Mailing ListThird Party Advisory
  • github.com https://github.com/albertobeta/PodcastGenerator/commits/master
    Third Party Advisory
  • netsparker.com https://www.netsparker.com/web-applications-advisories/ns-18-051-stored-cross-site-scripting-in-podcastgenerator/
    ExploitThird Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.