CVE-2023-4820

PoC —

CVSS 3.1

5.4 medium

EPSS

<1%p34

Published

Oct 16, 2023 (Oct 16, 2023)

Modified

Jun 17, 2026

Description

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.0.12 does not sanitize and escape the media url field in posts, which could allow users with privileges as low as contributor to inject arbitrary web scripts that could target a site admin or superadmin.

Vendors: blubrry
Products: powerpress
Ecosystems: WordPress
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.