Read the docs

Podcastgenerator

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Podcastgenerator records in CISA KEV

No Podcastgenerator vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Podcast Generator 6 records MEDIUM

Records

7 records

TI-2023-30203 CVE-2023-53920 · GHSA-fvgc-pwfp-mvr3

PodcastGenerator Stored Cross-Site Scripting via Podcast Title Field

Priority MEDIUM 56

PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the podcast title field accessible through the podcast details interface (podcast_details.php).

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00331 Published 2025-12-17 No fix listed CWE-79
TI-2023-30202 CVE-2023-53919 · GHSA-24wc-c957-8qx7

PodcastGenerator Stored Cross-Site Scripting via Freebox Content Field

Priority MEDIUM 56

PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the Freebox content field accessible through the theme customization interface (theme_freebox.php).

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00331 Published 2025-12-17 No fix listed CWE-79
TI-2023-30201 CVE-2023-53918 · GHSA-36m5-4hhc-2hxj

PodcastGenerator Stored Cross-Site Scripting via Episode Title Field

Priority MEDIUM 56

PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the episode title field accessible through the episodes upload interface (episodes_upload.php).

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00342 Published 2025-12-17 No fix listed CWE-79
TI-2021-22581 CVE-2021-47968 · GHSA-7rjr-6xrm-45m8

Podcast Generator 3.1 Persistent Cross-Site Scripting via long_description

Priority MEDIUM 56

Podcast Generator 3.1 is vulnerable to persistent cross-site scripting, allowing authenticated attackers to inject malicious scripts by submitting unfiltered JavaScript code in the long_description parameter.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00193 Published 2026-05-15 Fixed in 3.1.1 CWE-79
TI-2025-43101 CVE-2025-70336

A Stored cross-site scripting (XSS) vulnerability in 'Create New Live Item' in…

Priority LOW 23

A Stored cross-site scripting (XSS) vulnerability in 'Create New Live Item' in PodcastGenerator 3.2.9 allows remote attackers to inject arbitrary script or HTML via the 'TITLE', 'SHORT DESCRIPTION' and 'LONG DESCRIPTION'…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00571 Published 2026-01-28 No fix listed CWE-79
Open these records in search →