Serendipity Security Vulnerabilities and Issues — Serendipity CVE List

Lucene search

S9ySerendipity

2 matches found

CVE•added 2019/05/24 6:29 p.m.•60 views

CVE-2016-10752

serendipity_moveMediaDirectory in Serendipity 2.0.3 allows remote attackers to upload and execute arbitrary PHP code because it mishandles an extensionless filename during a rename, as demonstrated by "php" as a filename.

9.8CVSS9.7AI score0.00748EPSS

CVE•added 2019/05/09 11:29 p.m.•45 views

CVE-2019-11870

Serendipity before 2.1.5 has XSS via EXIF data that is mishandled in the templates/2k11/admin/media_choose.tpl Editor Preview feature or the templates/2k11/admin/media_items.tpl Media Library feature.

6.1CVSS5.8AI score0.00518EPSS