CVE-2023-53919

Publication date

2025-12-17 22:44:52

Family

VulnCheck

State

PUBLISHED

Description

PodcastGenerator 3.2.9 contains a stored cross-site scripting vulnerability in the Freebox content field accessible through the theme customization interface (theme_freebox.php). Malicious JavaScript payloads injected into the Freebox content execute when users visit the applications home page.