CVE-2026-73628 Serendipity 2.3.5 Reflected XSS via search clean-URL route

Serendipity versions = 2.3.5 and . In include/functionsrouting.inc.php serveSearch, the sanitisation pipeline runs urldecode after HTML-encoding, so a single URL-encoded HTML payload survives striptags and htmlspecialchars and is then decoded back into live HTML in the page. A crafted search link...

CVE-2026-73628: Improper Neutralization of Input During Web Page Generation

Serendipity versions = 2.3.5 and = 2.6.0 contain a reflected cross-site scripting vulnerability in the search clean-URL route /search/ . In include/functionsrouting.inc.php serveSearch, the sanitisation pipeline runs urldecode after HTML-encoding, so a single URL-encoded HTML payload survives...