Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: Podcastgenerator Clear all filters
TI-2021-22581 CVE-2021-47968 · GHSA-7rjr-6xrm-45m8

Podcast Generator 3.1 Persistent Cross-Site Scripting via long_description

Priority MEDIUM 56

Podcast Generator 3.1 is vulnerable to persistent cross-site scripting, allowing authenticated attackers to inject malicious scripts by submitting unfiltered JavaScript code in the long_description parameter.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00193 Published 2026-05-15 Fixed in 3.1.1 CWE-79
TI-2025-43101 CVE-2025-70336

A Stored cross-site scripting (XSS) vulnerability in 'Create New Live Item' in…

Priority LOW 23

A Stored cross-site scripting (XSS) vulnerability in 'Create New Live Item' in PodcastGenerator 3.2.9 allows remote attackers to inject arbitrary script or HTML via the 'TITLE', 'SHORT DESCRIPTION' and 'LONG DESCRIPTION'…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00571 Published 2026-01-28 No fix listed CWE-79
TI-2023-30203 CVE-2023-53920 · GHSA-fvgc-pwfp-mvr3

PodcastGenerator Stored Cross-Site Scripting via Podcast Title Field

Priority MEDIUM 56

PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the podcast title field accessible through the podcast details interface (podcast_details.php).

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00331 Published 2025-12-17 No fix listed CWE-79
TI-2023-30202 CVE-2023-53919 · GHSA-24wc-c957-8qx7

PodcastGenerator Stored Cross-Site Scripting via Freebox Content Field

Priority MEDIUM 56

PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the Freebox content field accessible through the theme customization interface (theme_freebox.php).

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00331 Published 2025-12-17 No fix listed CWE-79
TI-2023-30201 CVE-2023-53918 · GHSA-36m5-4hhc-2hxj

PodcastGenerator Stored Cross-Site Scripting via Episode Title Field

Priority MEDIUM 56

PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the episode title field accessible through the episodes upload interface (episodes_upload.php).

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00342 Published 2025-12-17 No fix listed CWE-79