Skip to content
OpenAdvisories
Unscored DSA-1528-1 3 CVEs

serendipity - cross site scripting

Published Mar 24, 2008 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 4.0 serendipity 1.0.4-1+etch1

Vulnerabilities 3

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the remote RSS sidebar plugin (serendipity_plugin_remoterss) in S9Y Serendi…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Serendipity (S9Y) before 1.3-beta1 allows remote authenticated users to inj…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Serendipity (S9Y) before 1.3 allows remote attackers to inject arbitrary we…