CVE-2023-53919 — PodcastGenerator Stored Cross-Site Scripting via Freebox Content Field
PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the Freebox content field accessible through the theme customization interface (theme_freebox.php)…
Published: 2025-12-17 · CVSS: 5.1 · CVSS 4.0
PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the Freebox content field accessible through the theme customization interface (theme_freebox.php). Malicious JavaScript payloads injected into the Freebox content execute when users visit the application's home page.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7