IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-01-28 16:16

MODIFIED

2026-01-28 16:16

EPSS (Prob. Exploit)

0.57%

Top 52.5%

DATA SOURCES:

NVD 🔗 2026-01-28 FIRST EPSS 🔗 2026-11-08 OSV 🔗 2026-11-08

> DESCRIPTION

A Stored cross-site scripting (XSS) vulnerability in 'Create New Live Item' in PodcastGenerator 3.2.9 allows remote attackers to inject arbitrary script or HTML via the 'TITLE', 'SHORT DESCRIPTION' and 'LONG DESCRIPTION' parameters. The saved payload gets executed on 'View All Live Items' and 'Live Stream' pages.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

AFFECTED PACKAGES:

Unknown / Unknown

2 versions affected

> HISTORIQUE DES MODIFICATIONS

Première apparition

28/01/2026 16:16

Source: NVD

Total des modifications: 0 Dernière mise à jour: 9 months ago

> REFERENCES

https://github.com/PodcastGenerator/PodcastGenerator