Serendipity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-6205)

Description

Cross-site scripting (XSS) vulnerability in the remote RSS sidebar plugin (serendipity_plugin_remoterss) in S9Y Serendipity before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via a link in an RSS feed.

Remediation

References

CVE-2007-6205

Related Vulnerabilities

phpMyFAQ Insufficient Session Expiration Vulnerability (CVE-2023-5865)

Ruby Improper Input Validation Vulnerability (CVE-2011-4815)

WordPress Plugin Simple Backup Arbitrary File Download (2.7.10)

Drupal Core 7.x Directory Traversal (7.0 - 7.66)

PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-15162)

Severity

Medium

Classification

CVE-2007-6205 CWE-707