CVE-2021-47968: Podcastgenerator Podcast Generator

Medium severity, CVSS 6.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Podcast Generator 3.1 is vulnerable to persistent cross-site scripting, allowing authenticated attackers to inject malicious scripts by submitting unfiltered JavaScript code in the long_description parameter. Attackers can inject script tags through episode creation or editing requests to execute arbitrary JavaScript when other users view the episode details.

Affected products

• Podcastgenerator Podcast Generator: before 3.1.1 (fixed in 3.1.1)

Published 2026-05-15. Last modified 2026-06-17.