CVE-2024-25599 HIGH

CVE-2024-25599: WordPress Seriously Simple Podcasting plugin <= 3.0.2 - Reflected Cross Site Scripting (XSS) vulnerability

Vendor Craig Hewitt
Product Seriously Simple Podcasting
Weakness CWE-79 · XSS
Published March 28, 2024
Last update May 11, 2026
View on NVD All CVEs

CVSS base score

7.1/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

What the vulnerability does

01Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting.This issue affects Seriously Simple Podcasting: from n/a through <= 3.0.2.

Key dates

02Disclosure timeline

March 28, 2024 CVE published
May 11, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-40904 HTML injection in Smart Polling in Guardian/CMC before 26.1.0 CVE-2023-2298 Online Booking & Scheduling Calendar for WordPress by vcita <= 4.3.0 - Unauthenticated Stored Cross-Site Scripting CVE-2019-0047 Junos OS: Persistent XSS vulnerability in J-Web CVE-2021-24971 WP Responsive Menu < 3.1.7.1 - Subscriber+ Settings Update to Stored XSS CVE-2025-26912 WordPress Easy Elementor Addons plugin <= 2.1.6 - Cross Site Scripting (XSS) vulnerability