Description

Cross-site scripting (XSS) vulnerability in Serendipity before 1.5.4, when "Remember me" logins are enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2010-2957

Related Vulnerabilities

WordPress Plugin 1 Flash Gallery 'upload.php' Arbitrary File Upload (1.5.7)

MySQL CVE-2013-1511 Vulnerability (CVE-2013-1511)

Oracle Database Server CVE-2012-0525 Vulnerability (CVE-2012-0525)

WordPress Plugin Blue Wrench Video Widget Cross-Site Request Forgery (1.0.5)

Moodle Incorrect Authorization Vulnerability (CVE-2021-20283)

Severity

Low

Classification

CVE-2010-2957 CWE-707

Tags

Missing Update Known Vulnerabilities