Description
Cross-site scripting (XSS) vulnerability in the BBCode plugin for Serendipity before 0.8 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
References
- 13411 vdb-entry
- 15145 third-party-advisory
- 15876 vdb-entry
- http://www.s9y.org/63.html#A9