TI-2026-01084 CVE-2026-1382 · GHSA-hw45-p7q4-m97q
Cross-site scripting in freshlabs fresh Podcaster
Priority LOW 28
The fresh Podcaster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'freshpodcaster' shortcode in all versions up to, and including, 1.0.7 due to insufficient input sanitization and output escap…