CVE-2026-97319 — PowerPress < 11.17.2 - Contributor+ Stored XSS via Podcast Player Block

CVE-2026-97319

PowerPress < 11.17.2 - Contributor+ Stored XSS via Podcast Player Block PUBLISHED

Description (CNA)

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.2 does not sanitize and escape a block attribute before outputting it in a page, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

Affected (CNA)

Vendor / product	Versions
Unknown / PowerPress Podcasting plugin by Blubrry	affected 0 before 11.17.2

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/6ea7d2b5-8406-4efe-9b61-465af40d9a32/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.