CVE-2023-53920
Medium · 5.4CVSS
5.4
EPSS
0.3%
Published
Dec 17, 2025
CISA due date
—
The record
PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the podcast title field accessible through the podcast details interface (podcast_details.php). Malicious JavaScript payloads injected into the podcast title execute when users visit the application's home page.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|