Medium severity6.4NVD Advisory· Published May 15, 2026· Updated May 26, 2026

CVE-2021-47968

Description

Podcast Generator 3.1 is vulnerable to persistent cross-site scripting, allowing authenticated attackers to inject malicious scripts by submitting unfiltered JavaScript code in the long_description parameter. Attackers can inject script tags through episode creation or editing requests to execute arbitrary JavaScript when other users view the episode details.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Albertobeta/Podcastgeneratorinferred
Range: = 3.1

Patches

Vulnerability mechanics

References

podcastgenerator.net/demoV2/nvd
podcastgenerator.net/downloadnvd
www.exploit-db.com/exploits/49866nvd
www.vulncheck.com/advisories/podcast-generator-persistent-cross-site-scripting-via-long-descriptionnvd

News mentions

No linked articles in our index yet.

cvss	0.416
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000