CVE-2023-53919: Podcastgenerator Podcast Generator

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the Freebox content field accessible through the theme customization interface (theme_freebox.php). Malicious JavaScript payloads injected into the Freebox content execute when users visit the application's home page.

Affected products

• Podcastgenerator Podcast Generator: version 3.2.9 only

Published 2025-12-17. Last modified 2026-06-17.