CVE-2023-53899 - PodcastGenerator 3.2.9 Blind Server-Side Request Forgery via XML Injection

CVE ID : CVE-2023-53899 Published : Dec. 16, 2025, 5:16 p.m. | 52 minutes ago Description : PodcastGenerator 3.2.9 contains a blind server-side request forgery vulnerability that allows attackers to inject XML in the episode upload form. Attackers can manipulate the 'shortdesc' parameter to trigger external HTTP requests to arbitrary endpoints during podcast episode creation. Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor