CVE-2023-53920: Podcastgenerator Podcast Generator

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the podcast title field accessible through the podcast details interface (podcast_details.php). Malicious JavaScript payloads injected into the podcast title execute when users visit the application's home page.

Affected products

Published 2025-12-17. Last modified 2026-06-17.