There is CSRF in Serendipity 2.0.5, allowing attackers to install any themes via a GET request.

Published Apr 24, 2017 · Updated Sep 17, 2024 · Assigned by mitre