CVE-2011-3610: Improper Neutralization of Input During Web Page Generation

A Cross-site Scripting XSS vulnerability exists in the Serendipity freetag plugin before 3.30 in the tagcloud parameter to plugins/serendipityeventfreetag/tagcloud.swf...