Description There is CSRF in Serendipity 2.0.5, allowing attackers to install any themes via a GET request. Remediation References CVE-2017-8101 Related Vulnerabilities WordPress Plugin WordPress Geo-CF Geo Cross-Site Scripting (7.13.11) Squid Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2019-18860) WordPress Plugin Simple Business Directory with Maps PHP Object Injection (3.6.0) WordPress Plugin Xhanch-My Twitter Multiple Cross-Site Request Forgery Vulnerabilities (2.7.7) MySQL Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Vulnerability (CVE-2020-5258) Severity High Classification CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Tags Missing Update Known Vulnerabilities CWE-352 CVE-2017-8101