CVE-2011-1134

CVE-2011-1134 describes a Cross-Site Scripting (XSS) flaw in the Xinha editor bundled with Serendipity before version 1.5.5. The root cause is insufficient validation of client-side data by the web application, enabling remote attackers to execute arbitrary code in the image manager. Affected sof...