Executive Summary

The PowerPress Podcasting plugin by Blubrry for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) via the 'embed' Episode Meta Field in all versions up to and including 11.16.8.

This vulnerability occurs because the plugin does not properly sanitize input or escape output for the 'embed' field. Authenticated users with author-level access or higher can inject arbitrary web scripts into pages.

These injected scripts execute whenever any user accesses the affected page. The issue arises because the embed value is stored using update_post_meta() instead of WordPress's core post content pipeline, bypassing WordPress's standard filtering and role-based XSS protections.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows an attacker with author-level access or higher to inject malicious scripts that execute in the browsers of users who visit the infected pages.

Potential impacts include theft of user credentials, session hijacking, defacement of website content, or distribution of malware.

Because the vulnerability requires authenticated access, it primarily threatens sites where users have elevated privileges, but the consequences can affect all visitors.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, you should update the PowerPress Podcasting plugin by Blubrry to a version later than 11.16.8 where the issue is fixed.

Additionally, restrict author-level access and above to trusted users only, since the vulnerability requires authenticated users with author-level permissions to exploit.

Monitor and sanitize any input related to the 'embed' Episode Meta Field to prevent injection of arbitrary scripts.

Useful 0 Not Useful 0