CNNVD-202601-4747 Information

CNNVD ID

CNNVD-202601-4747

CVE-2025-70336

  • CNNVD Published: 2026-01-28

Description (Chinese)

Podcast Generator是PodcastGenerator开源的一套使用PHP语言编写的免费播客发布脚本。 Podcast Generator 3.2.9版本存在安全漏洞,该漏洞源于创建新直播项目功能存在存储型跨站脚本漏洞,可能导致执行任意脚本或HTML。

Description (English)

Podcast Generator is a free podcast in PHP language from PodcastGenerator. There is a security loophole in version 3.2.9 of Podcast Generator, which stems from the creation of a new live project function with a storage cross-site script gap that may lead to the execution of any script or HTML.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

PodcastGenerator

Published

2026-01-28

Last Modified

2026-02-24

References

https://github.com/PodcastGenerator/PodcastGenerator https://github.com/aryasahil96-manu/CVE-Disclosures/blob/main/CVE-2025-70336

Share on: