Security Advisory

CVE-2023-53918

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-12-17 22:44:51
Last updated 2026-07-15 01:24:53
Assigner VulnCheck
CVSS score 5.1
State PUBLISHED

Description

PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the episode title field accessible through the episodes upload interface (episodes_upload.php). Malicious JavaScript payloads injected into episode titles execute when administrators view the episodes list page (episodes_list.php).