CVE-2023-53920 — PodcastGenerator Stored Cross-Site Scripting via Podcast Title Field
PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the podcast title field accessible through the podcast details interface (podcast_details.php). Ma…
Published: 2025-12-17 · CVSS: 5.1 · CVSS 4.0
PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the podcast title field accessible through the podcast details interface (podcast_details.php). Malicious JavaScript payloads injected into the podcast title execute when users visit the application's home page.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7