Unrated severityNVD Advisory· Published Oct 16, 2023· Updated Mar 5, 2025

PowerPress Podcasting < 11.0.12 - Contributor+ Stored XSS

CVE-2023-4820

Description

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.0.12 does not sanitize and escape the media url field in posts, which could allow users with privileges as low as contributor to inject arbitrary web scripts that could target a site admin or superadmin.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Blubrry/PowerPress Podcasting plugin by Blubrrycpe-rescue
WordPress/Powerpressllm-fuzzy
Range: <11.0.12
Package: https://wordpress.org/plugins/powerpress

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/e866a214-a142-43c7-b93d-ff2301a3e432mitreexploitvdb-entrytechnical-description

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000