The Blubrry PowerPress Podcasting plugin 6.0.4 for WordPress has XSS via the tab parameter.Referenceshttps://wordpress.org/plugins/powerpress/#developershttps://github.com/cybersecurityworks/Disclosed/issues/7https://cybersecurityworks.com/zerodays/cve-2015-9410-blubrry.html