Podcast Generator Persistent Cross-Site Scripting Vulnerability

A persistent cross-site scripting vulnerability has been identified in Podcast Generator version 3.1. This vulnerability allows authenticated attackers to inject unfiltered JavaScript into the 'long_description' parameter while creating or editing episodes. The injected scripts are executed when other users view the episode details.

Impact

Exploitation of this vulnerability allows for persistent cross-site scripting, where injected scripts are executed in the context of the user viewing the episode.

Reproduction

To reproduce this vulnerability, log into an admin account and navigate to the episode creation or editing interface. In the 'Long Description' field, enter a script tag containing JavaScript code, such as a `prompt()` call. After saving the episode, the injected script will execute when the episode details are viewed.