Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo

CMS

Serendipity

Serendipity is a PHP-powered weblog engine that gives the user an easy way to maintain a blog.

Official Site:

https://docs.s9y.org/

Severity Summary:

Critical: 6 High: 13 Medium: 26 Low: 2
Reference
Title
Severity
CVE-2004-1620
Serendipity Other Vulnerability
Medium
CVE-2015-8603
Serendipity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2016-10737
Serendipity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2017-5474
Serendipity URL Redirection to Untrusted Site (Open Redirect) Vulnerability
Medium
CVE-2016-9681
Serendipity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2011-4090
Serendipity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2011-1135
Serendipity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2011-1133
Serendipity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2015-6969
Serendipity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2011-3800
Serendipity Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium
CVE-2015-6968
Serendipity Other Vulnerability
Medium
CVE-2015-6943
Serendipity Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
Medium
CVE-2013-5670
Serendipity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2019-11870
Serendipity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2012-2331
Serendipity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2015-2289
Serendipity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Low
CVE-2010-2957
Serendipity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Low