Medium severity6.1OSV Advisory· Published Dec 17, 2025· Updated Jun 17, 2026
CVE-2023-53918
CVE-2023-53918
Description
PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the episode title field accessible through the episodes upload interface (episodes_upload.php). Malicious JavaScript payloads injected into episode titles execute when administrators view the episodes list page (episodes_list.php).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: 2.5, 2.6, 2.7, …
cpe:2.3:a:podcastgenerator:podcast_generator:3.2.9:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:podcastgenerator:podcast_generator:3.2.9:*:*:*:*:*:*:*
- (no CPE)range: =3.2.9
Patches
Vulnerability mechanics
References
3- www.exploit-db.com/exploits/51454nvdExploitThird Party AdvisoryVDB Entry
- www.vulncheck.com/advisories/podcastgenerator-stored-cross-site-scripting-via-episode-title-fieldnvdExploitThird Party Advisory
- podcastgenerator.netnvdProduct
News mentions
0No linked articles in our index yet.