Vulnerabilities > Jesweb > Anchor Episodes Index

DATE CVE VULNERABILITY TITLE RISK
2024-10-22 CVE-2024-10189 Cross-site Scripting vulnerability in Jesweb Anchor Episodes Index
The Anchor Episodes Index (Spotify for Podcasters) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's anchor_episodes shortcode in all versions up to, and including, 2.1.10 due to insufficient input sanitization and output escaping on user supplied attributes.
network
low complexity
jesweb CWE-79
5.4