CVE-2023-53919

Medium · 5.4

CVSS

5.4

EPSS

0.3%

Published

Dec 17, 2025

CISA due date

—

The record

PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the Freebox content field accessible through the theme customization interface (theme_freebox.php). Malicious JavaScript payloads injected into the Freebox content execute when users visit the application's home page.

Affected packages

Ecosystem	Package	Introduced	Fixed