CVE-2026-112833: WordPress Seriously Simple Podcasting plugin <= 3.17.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Castos Seriously Simple Podcasting seriously-simple-podcasting allows Stored XSS.This issue affects Seriously Simple Podcasting: from n/a through 3.17.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Seriously Simple Podcasting pluginto a version that resolves this vulnerability.Fixed in 3.17.1
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The attack requires low-level privileges and user interaction. It is remotely exploitable with low attack complexity.
How can I determine whether my site is affected?
Check the installed version of the Castos Seriously Simple Podcasting plugin. Versions through 3.17.0 are affected.
What is the potential impact of successful exploitation?
The issue allows stored cross-site scripting and has low confidentiality, integrity, and availability impact. Its scope is changed, meaning the impact can extend beyond the vulnerable component's original security authority.