Serendipity Security Vulnerabilities and Issues — Serendipity CVE List

Lucene search

S9ySerendipity

2 matches found

CVE•added 2005/10/04 10:2 p.m.•39 views

CVE-2005-3129

Cross-site request forgery (CSRF) vulnerability in Serendipity 0.8.4 and earlier allows remote attackers to perform unauthorized actions as a logged in user via a link or IMG tag to serendipity_admin.php.

5.1CVSS7.2AI score0.01679EPSS

CVE•added 2005/10/25 4:0 a.m.•38 views

CVE-2004-2525

Cross-site scripting (XSS) vulnerability in compat.php in Serendipity before 0.7.1 allows remote attackers to inject arbitrary web script or HTML via the searchTerm variable.

4.3CVSS5.7AI score0.00572EPSS