cleantalk
Vulnerabilities and Security Researches

Podcast Feed Player Widget and Shortcode, CVE-2025-53300

CVE, Research URL

CVE-2025-53300

Published on
Jun 27, 2025
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in douglaskarr Podcast Feed Player Widget and Shortcode allows Stored XSS. This issue affects Podcast Feed Player Widget and Shortcode: from n/a through 2.2.0.
Affected versions
Min -, max 2.2.0.
Status
vulnerable