Lucene search
+L

4 matches found

Cvelist
Cvelist
•added 2025/12/17 10:44 p.m.•58 views

CVE-2023-53918 PodcastGenerator Stored Cross-Site Scripting via Episode Title Field

PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the episode title field accessible through the episodes upload interface episodesupload.php. Malicious JavaScript payloads injected into episode titles execute when administrators view the episodes list page...

6.1CVSS0.00342EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2025/12/17 12:00 a.m.•17 views

PT-2025-51956

Name of the Vulnerable Software and Affected Versions PodcastGenerator version 3.2.9 Description PodcastGenerator version 3.2.9 has a stored cross-site scripting issue. A malicious JavaScript payload can be injected into the episode title field through the episodes upload interface, specifically...

6.1CVSS5.6AI score0.00342EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/12/17 12:00 a.m.•21 views

Podcast Generator Cross-Site Script Vulnerability

Podcast Generator is an open source set of free podcast publishing scripts written in PHP by PodcastGenerator. A cross-site scripting vulnerability exists in Podcast Generator version 3.2.9, which stems from improper cleaning of the episode title field and could lead to a stored cross-site...

6.1CVSS5.7AI score0.00342EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/17 12:00 a.m.•8 views

CVE-2023-53918: Improper Neutralization of Input During Web Page Generation

PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the episode title field accessible through the episodes upload interface episodesupload.php. Malicious JavaScript payloads injected into episode titles execute when administrators view the episodes list page...

6.1CVSS5.7AI score0.00342EPSS
SaveExploits1References1
Rows per page
Query Builder