Podcastgenerator Podcast Generator — known CVE vulnerabilities

Every CVE whose affected-product data names Podcastgenerator Podcast Generator, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2023-53899 — CVSS 9.8 (critical): PodcastGenerator 3.2.9 contains a blind server-side request forgery vulnerability that allows attackers to inject XML in the episode upload…
• CVE-2018-20121 — CVSS 6.1 (medium): Podcast Generator 2.7 has stored cross-site scripting (XSS) via the URL addcategory parameter.
• CVE-2023-53918 — CVSS 6.1 (medium): PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the episode title field accessible through the episodes…
• CVE-2023-53919 — CVSS 5.4 (medium): PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the Freebox content field accessible through the theme…
• CVE-2023-53920 — CVSS 5.4 (medium): PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the podcast title field accessible through the podcast…
• CVE-2025-70336 — CVSS 4.8 (medium): A Stored cross-site scripting (XSS) vulnerability in 'Create New Live Item' in PodcastGenerator 3.2.9 allows remote attackers to inject…