PT-2014-9009

Name of the Vulnerable Software and Affected Versions Serendipity versions prior to 2.0-rc2 Description The issue allows remote attackers to inject arbitrary web script or HTML via a blog comment in the QUERY STRING to serendipity/index.php, potentially leading to cross-site scripting XSS attacks...