Description There is CSRF in Serendipity 2.0.5, allowing attackers to install any themes via a GET request. Remediation References CVE-2017-8101 Related Vulnerabilities b2evolution Other Vulnerability (CVE-2006-6417) WordPress Plugin Zingiri Web Shop 'uploadfilexd.php' Arbitrary File Upload (2.4.3) WordPress Plugin Defa Online Image Protector Cross-Site Scripting (3.3) WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-16222) Grafana Improper Authentication Vulnerability (CVE-2021-28148) Severity High Classification CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Tags Missing Update Known Vulnerabilities CWE-352 CVE-2017-8101