PT-2019-6617

Name of the Vulnerable Software and Affected Versions Serendipity versions prior to 1.5.5 Xinha affected versions not specified Description The issue allows remote attackers to execute arbitrary code. This is due to a Cross-Site Scripting XSS flaw in Xinha, which is included in the Serendipity...

CVE-2011-1135: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in plugins/ExtendedFileManager/manager.php and plugins/ImageManager/manager.php...