722 matches found
CVE-2026-73629
Serendipity before 2.6.0 contains a server-side request forgery vulnerability in the serendipityurlallowed filter that fails to block hex-encoded IPv4 addresses, IPv6 literals, and link-local ranges. Authenticated users with adminImagesAdd permission can bypass the filter using alternate address...
CVE-2026-73628
Serendipity versions = 2.3.5 and . In include/functionsrouting.inc.php serveSearch, the sanitisation pipeline runs urldecode after HTML-encoding, so a single URL-encoded HTML payload survives striptags and htmlspecialchars and is then decoded back into live HTML in the page. A crafted search link...
CVE-2026-73629
Serendipity before 2.6.0 contains a server-side request forgery vulnerability in the serendipityurlallowed filter that fails to block hex-encoded IPv4 addresses, IPv6 literals, and link-local ranges. Authenticated users with adminImagesAdd permission can bypass the filter using alternate address...
CVE-2026-73628
Serendipity versions = 2.3.5 and . In include/functionsrouting.inc.php serveSearch, the sanitisation pipeline runs urldecode after HTML-encoding, so a single URL-encoded HTML payload survives striptags and htmlspecialchars and is then decoded back into live HTML in the page. A crafted search link...
CVE-2026-73629 Serendipity before 2.6.0 SSRF via hex IPv4 and IPv6 addresses
Serendipity before 2.6.0 contains a server-side request forgery vulnerability in the serendipityurlallowed filter that fails to block hex-encoded IPv4 addresses, IPv6 literals, and link-local ranges. Authenticated users with adminImagesAdd permission can bypass the filter using alternate address...
CVE-2026-73629 Serendipity before 2.6.0 SSRF via hex IPv4 and IPv6 addresses
Serendipity before 2.6.0 contains a server-side request forgery vulnerability in the serendipityurlallowed filter that fails to block hex-encoded IPv4 addresses, IPv6 literals, and link-local ranges. Authenticated users with adminImagesAdd permission can bypass the filter using alternate address...
CVE-2026-73629 Serendipity before 2.6.0 SSRF via hex IPv4 and IPv6 addresses
Serendipity before 2.6.0 contains a server-side request forgery vulnerability in the serendipityurlallowed filter that fails to block hex-encoded IPv4 addresses, IPv6 literals, and link-local ranges. Authenticated users with adminImagesAdd permission can bypass the filter using alternate address...
EUVD-2026-57798
Serendipity before 2.6.0 contains a server-side request forgery vulnerability in the serendipityurlallowed filter that fails to block hex-encoded IPv4 addresses, IPv6 literals, and link-local ranges. Authenticated users with adminImagesAdd permission can bypass the filter using alternate address...
CVE-2026-73629
CVE-2026-73629 affects Serendipity before 2.6.0. The issue is a server-side request forgery in the serendipity_url_allowed() filter that fails to block hex-encoded IPv4 addresses, IPv6 literals, and link-local ranges. Authenticated users with adminImagesAdd permission can bypass the filter using ...
CVE-2026-73628
The CVE-2026-73628 entry concerns Serendipity versions 2.3.5 through 2.6.0, which contain a reflected XSS in the search clean-URL route (/search/). In include/functions_routing.inc.php, the serveSearch() sanitisation sequence applies urldecode() after HTML-encoding, allowing a URL-encoded HTML pa...
EUVD-2026-57797
Serendipity versions = 2.3.5 and . In include/functionsrouting.inc.php serveSearch, the sanitisation pipeline runs urldecode after HTML-encoding, so a single URL-encoded HTML payload survives striptags and htmlspecialchars and is then decoded back into live HTML in the page. A crafted search link...
CVE-2026-73628 Serendipity 2.3.5 Reflected XSS via search clean-URL route
Serendipity versions = 2.3.5 and . In include/functionsrouting.inc.php serveSearch, the sanitisation pipeline runs urldecode after HTML-encoding, so a single URL-encoded HTML payload survives striptags and htmlspecialchars and is then decoded back into live HTML in the page. A crafted search link...
CVE-2026-73628 Serendipity 2.3.5 Reflected XSS via search clean-URL route
Serendipity versions = 2.3.5 and . In include/functionsrouting.inc.php serveSearch, the sanitisation pipeline runs urldecode after HTML-encoding, so a single URL-encoded HTML payload survives striptags and htmlspecialchars and is then decoded back into live HTML in the page. A crafted search link...
CVE-2026-73628 Serendipity 2.3.5 Reflected XSS via search clean-URL route
Serendipity versions = 2.3.5 and . In include/functionsrouting.inc.php serveSearch, the sanitisation pipeline runs urldecode after HTML-encoding, so a single URL-encoded HTML payload survives striptags and htmlspecialchars and is then decoded back into live HTML in the page. A crafted search link...
CVE-2026-73629: Server-Side Request Forgery (SSRF)
Serendipity before 2.6.0 contains a server-side request forgery vulnerability in the serendipityurlallowed filter that fails to block hex-encoded IPv4 addresses, IPv6 literals, and link-local ranges. Authenticated users with adminImagesAdd permission can bypass the filter using alternate address...
PT-2026-71457
Serendipity before 2.6.0 contains a server-side request forgery vulnerability in the serendipity url allowed filter that fails to block hex-encoded IPv4 addresses, IPv6 literals, and link-local ranges. Authenticated users with adminImagesAdd permission can bypass the filter using alternate addres...
PT-2026-71456
Serendipity versions = 2.3.5 and . In include/functions routing.inc.php serveSearch, the sanitisation pipeline runs urldecode after HTML-encoding, so a single URL-encoded HTML payload survives strip tags and htmlspecialchars and is then decoded back into live HTML in the page. A crafted search li...
CVE-2026-73628: Improper Neutralization of Input During Web Page Generation
Serendipity versions = 2.3.5 and = 2.6.0 contain a reflected cross-site scripting vulnerability in the search clean-URL route /search/ . In include/functionsrouting.inc.php serveSearch, the sanitisation pipeline runs urldecode after HTML-encoding, so a single URL-encoded HTML payload survives...
CVE-2026-67350
Serendipity before 2.6.1 contains an open redirect vulnerability in exit.php that allows unauthenticated attackers to redirect users to arbitrary external sites by supplying a malicious Base64-encoded url parameter when the Track Exits plugin is configured with commentredirection set to s9y...
CVE-2026-67350
Serendipity before 2.6.1 contains an open redirect vulnerability in exit.php that allows unauthenticated attackers to redirect users to arbitrary external sites by supplying a malicious Base64-encoded url parameter when the Track Exits plugin is configured with commentredirection set to s9y...