Description

Cross-site scripting (XSS) vulnerability in Serendipity before 1.5.4, when "Remember me" logins are enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2010-2957

Related Vulnerabilities

WordPress Plugin WP Statistics SQL Injection (12.0.7)

MySQL CVE-2024-21218 Vulnerability (CVE-2024-21218)

WordPress Plugin Genesis Columns Advanced Cross-Site Scripting (2.0.3)

WordPress Plugin Super Store Finder for WordPress (Google Maps Store Locator) SQL Injection (6.3)

e107 Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2018-11127)

Severity

Low

Classification

CVE-2010-2957 CWE-707

Tags

Missing Update Known Vulnerabilities