CVE-2015-6969: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in js/2k11.min.js in the 2k11 theme in Serendipity before 2.0.2 allows remote attackers to inject arbitrary web script or HTML via a user name in a comment, which is not properly handled in a Reply link...

PT-2015-7429

Name of the Vulnerable Software and Affected Versions Serendipity versions prior to 2.0.2 Description A cross-site scripting XSS issue exists due to improper handling of user input in the 2k11 theme, specifically in the js/2k11.min.js file. This allows remote attackers to inject arbitrary web...