Serendipity before 1.6 has an XSS issue in the karma plugin which may allow privilege escalation.
View Full Alert
Related Posts
CVE-2011-4090Serendipity before 1.6 has an XSS issue in the karma plugin which may allow privilege escalation. View Full Alert
CVE-2011-1134 (serendipity)Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in the image manager. View Full Alert
CVE-2011-1133 (serendipity)Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code via plugins/ExtendedFileManager/backend.php. View Full Alert