2 matches found
CVE-2023-53932: Improper Neutralization of Input During Web Page Generation
Serendipity 2.4.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts through blog entry creation. Attackers can craft entries with JavaScript payloads that will execute when other users view the compromised blog post...
5.4CVSS5.8AI score0.00245EPSS
SaveExploits1References1
20