CVE-2021-47968
MEDIUM
NVD
CVSS Score
6.4
Severity
MEDIUM
Published
May 15, 2026
Vendor
unknown
Description
Podcast Generator 3.1 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting unfiltered JavaScript code in the long_description parameter. Attackers can inject script tags through episode creation or editing requests to execute arbitrary JavaScript when other users view the episode details.