CVE-2023-53918 — PodcastGenerator Stored Cross-Site Scripting via Episode Title Field
PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the episode title field accessible through the episodes upload interface (episodes_upload.php). Ma…
Published: 2025-12-17 · CVSS: 5.1 · CVSS 4.0
PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the episode title field accessible through the episodes upload interface (episodes_upload.php). Malicious JavaScript payloads injected into episode titles execute when administrators view the episodes list page (episodes_list.php).
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7