Seriously Simple Podcasting, CVE-2025-49923

CVE, Research URL: CVE-2025-49923
Home page URL: Security reports for Seriously Simple Podcasting
Application: Seriously Simple Podcasting
Published on: Oct 22, 2025
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows DOM-Based XSS.This issue affects Seriously Simple Podcasting: from n/a through <= 3.11.1.
Affected versions: max 3.11.1.
Status: vulnerable