<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: eteubert-podlove-podcast-publisher</title><description>Every new CVE for eteubert-podlove-podcast-publisher.</description><link>https://agentprime.io/</link><item><title>CVE-2026-93775: Podlove Podcast Publisher &lt;= 4.5.6 - Unauthenticated Stored Cross-Site Scripting via Auphonic Webhook</title><link>https://agentprime.io/advisories/CVE-2026-93775/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93775/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 10 Oct 2026 05:31:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-75966: Podlove Podcast Publisher &lt;= 4.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via &apos;episode_contributor[..][..][comment]&apos; Parameter</title><link>https://agentprime.io/advisories/CVE-2026-75966/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-75966/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 09 Sep 2026 03:28:49 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-16099: Podlove Podcast Publisher &lt;= 4.5.3 - Authenticated (Contributor+) PHP Object Injection to Arbitrary File Deletion via &apos;unfurl_data&apos; Parameter</title><link>https://agentprime.io/advisories/CVE-2026-16099/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-16099/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 16 Aug 2026 04:24:51 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-13001: Podlove Podcast Publisher &lt;= 4.5.1 - Unauthenticated Arbitrary File Upload via podlove_image_cache_url Parameter</title><link>https://agentprime.io/advisories/CVE-2026-13001/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-13001/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Jul 2026 19:33:12 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-10147: Podlove Podcast Publisher &lt;= 4.2.6 - Unauthenticated Arbitrary File Upload</title><link>https://agentprime.io/advisories/CVE-2025-10147/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-10147/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 23 Sep 2025 08:26:15 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-1383: Podlove Podcast Publisher &lt;= 4.2.2 - Cross-Site Request Forgery via ajax_transcript_delete Function</title><link>https://agentprime.io/advisories/CVE-2025-1383/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-1383/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 06 Mar 2025 11:11:01 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-0554: Podlove Podcast Publisher &lt;= 4.1.25 - Authenticated (Admin+) Stored Cross-Site Scripting via Feed Name</title><link>https://agentprime.io/advisories/CVE-2025-0554/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-0554/</guid><description>CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 18 Jan 2025 05:33:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-1109: Podlove Podcast Publisher &lt;= 4.0.11 - Missing Authorization to Unauthenticated Data Export</title><link>https://agentprime.io/advisories/CVE-2024-1109/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-1109/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 07 Feb 2024 11:02:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-1110: Podlove Podcast Publisher &lt;= 4.0.11 - Missing Authorization to Settings Import</title><link>https://agentprime.io/advisories/CVE-2024-1110/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-1110/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 07 Feb 2024 11:02:38 GMT</pubDate><category>CVE</category></item></channel></rss>