Description
Multiple cross-site scripting (XSS) vulnerabilities in Serendipity 0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) templatedropdown and (2) shoutbox plugins.
References
- http://sourceforge.net/project/shownotes.php?release_id=328092
- 15405 third-party-advisory
- 16661 vdb-entry
- 16660 vdb-entry