Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 29
Reset filtersPodlove Podcast Publisher <= 4.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'episode_contributor[..][..][comment]' Parameter
Podlove Podcast Publisher <= 4.5.4 - Unauthenticated Stored Cross-Site Scripting
Podlove Podcast Publisher <= 4.5.3 - Authenticated (Contributor+) PHP Object Injection to Arbitrary File Deletion via 'unfurl_data' Parameter
Podlove Podcast Publisher < 4.5.3 - Cross-Site Request Forgery
Podlove Podcast Publisher <= 4.5.1 - Unauthenticated Arbitrary File Upload via podlove_image_cache_url Parameter
Podlove Podcast Publisher <= 4.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Podlove Podcast Publisher <= 4.2.6 - Unauthenticated Arbitrary File Upload
Podlove Podcast Publisher <= 4.2.5 - Open Redirect
Podlove Podcast Publisher <= 4.2.2 - Cross-Site Request Forgery via ajax_transcript_delete Function
Podlove Podcast Publisher <= 4.1.23 - Authenticated (Admin+) Stored Cross-Site Scripting
Podlove Podcast Publisher <= 4.2.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Podlove Podcast Publisher <= 4.1.25 - Authenticated (Admin+) Stored Cross-Site Scripting via Feed Name
Podlove Podcast Publisher <= 4.1.15 - Authenticated (Admin+) Remote Code Execution
Podlove Podcast Publisher <= 4.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Podlove Podcast Publisher <= 4.1.13 - Cross-Site Request Forgery to Remote Code Execution
Podlove Podcast Publisher <= 4.0.14 - Cross-Site Request Forgery
Podlove Podcast Publisher <= 4.0.11 - Authenticated (Contributor+) Server-Side Request Forgery
Podlove Podcast Publisher <= 4.1.0 - Missing Authorization
Podlove Podcast Publisher <= 4.0.12 - Authenticated (Contributor+) SQL Injection
Podlove Podcast Publisher <= 4.0.9 - Reflected Cross-Site Scripting
Podlove Podcast Publisher <= 4.0.11 - Missing Authorization to Unauthenticated Data Export
Podlove Podcast Publisher <= 4.0.11 - Missing Authorization to Settings Import
Podlove Podcast Publisher <= 3.8.3 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.