Description

Serendipity before 1.6 has an XSS issue in the karma plugin which may allow privilege escalation.

Remediation

References

CVE-2011-4090

Related Vulnerabilities

SharePoint CVE-2020-17118 Vulnerability (CVE-2020-17118)

WordPress Plugin BetterLinks-Shorten, Track and Manage any URL Cross-Site Scripting (1.2.5)

WordPress Plugin CM Ad Changer Multiple Cross-Site Scripting Vulnerabilities (1.7.2)

WordPress Plugin Facebook Like Box Multiple Vulnerabilities (2.9.1)

XWiki Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-21380)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2011-4090