PodcastGenerator 3.2.9 – Stored XSS
# Exploit Title: PodcastGenerator 3.2.9 - Stored XSS # Date: 2026-08-08 # Exploit Author: Sahil Arya # Vendor Homepage: https://github.com/PodcastGenerator/PodcastGenerator # Software Link: https://github.com/PodcastGenerator/PodcastGenerator # Version: 3.2.9 # Tested on: Windows 11 / XAMPP # CVE : CVE-2025-70336 Description: PodcastGenerator 3.2.9 contains a stored Cross-Site Scripting vulnerability in the Live Items functionality. An authenticated administrator can inject JavaScript through the TITLE, SHORT DESCRIPTION, or LONG DESCRIPTION parameters. The payload is stored and subsequently executed when the Live Item is rendered in both the administrative Live Items listing and the public Live Stream page. Administrative privileges are required only to store the payload. Unauthenticated access is sufficient to trigger the stored payload through the public Live Stream page. Proof of Concept: 1. Log in to the PodcastGenerator administrator panel. 2. Navigate to: /admin/live_create.php 3. Insert the following payload into TITLE, SHORT DESCRIPTION, or LONG DESCRIPTION: <script>alert(document.domain)</script> 4. Save the Live Item. 5. Navigate to: /admin/live_list.php The JavaScript payload executes. 6. Open the public Live Stream page as an unauthenticated user: /live.php 7. The same stored payload executes in the visitor's browser. References: CVE: https://www.cve.org/CVERecord?id=CVE-2025-70336 NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-70336 Advisory: https://github.com/aryasahil96-manu/CVE-Disclosures/blob/main/CVE-2025-70336 |