Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: Podcastgenerator Component: Podcast Generator Clear all filters
TI-2025-43101 CVE-2025-70336

A Stored cross-site scripting (XSS) vulnerability in 'Create New Live Item' in…

Priority LOW 23

A Stored cross-site scripting (XSS) vulnerability in 'Create New Live Item' in PodcastGenerator 3.2.9 allows remote attackers to inject arbitrary script or HTML via the 'TITLE', 'SHORT DESCRIPTION' and 'LONG DESCRIPTION'…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00571 Published 2026-01-28 No fix listed CWE-79
TI-2023-30203 CVE-2023-53920 · GHSA-fvgc-pwfp-mvr3

PodcastGenerator Stored Cross-Site Scripting via Podcast Title Field

Priority MEDIUM 56

PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the podcast title field accessible through the podcast details interface (podcast_details.php).

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00331 Published 2025-12-17 No fix listed CWE-79
TI-2023-30202 CVE-2023-53919 · GHSA-24wc-c957-8qx7

PodcastGenerator Stored Cross-Site Scripting via Freebox Content Field

Priority MEDIUM 56

PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the Freebox content field accessible through the theme customization interface (theme_freebox.php).

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00331 Published 2025-12-17 No fix listed CWE-79
TI-2023-30201 CVE-2023-53918 · GHSA-36m5-4hhc-2hxj

PodcastGenerator Stored Cross-Site Scripting via Episode Title Field

Priority MEDIUM 56

PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the episode title field accessible through the episodes upload interface (episodes_upload.php).

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00342 Published 2025-12-17 No fix listed CWE-79