medium6.8
CVE-2026-97319
The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.2 does not sanitize and escape a block attribute before outputting it in a page, whic…
Impact
The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.2 does not sanitize and escape a block attribute before outputting it in a page, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Affected products
| Product | Affected versions |
|---|---|
| PowerPress Podcasting Plugin By Blubrry WordPress Plugin | before 11.17.2 |
Versions were read from the advisory text. No structured product data has been published for this record yet.