medium5.4
CVE-2023-53920
PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the podcast title field accessible through the podcast details interface (podcas…
Impact
PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the podcast title field accessible through the podcast details interface (podcast_details.php). Malicious JavaScript payloads injected into the podcast title execute when users visit the application's home page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Podcastgenerator | Podcast Generator | Version 3.2.9 |