Description

Cross-site scripting (XSS) vulnerability in serendipity_admin_image_selector.php in Serendipity 1.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the serendipity[htmltarget] parameter.

Remediation

References

CVE-2013-5314

Related Vulnerabilities

Drupal Core 5.x Multiple Vulnerabilities (5.0 - 5.7)

WordPress Plugin Popup Builder-Responsive WordPress Pop up-Subscription & Newsletter SQL Injection (3.44)

WordPress Plugin Cart66 Lite::WordPress Ecommerce Multiple Vulnerabilities (1.5.1.14)

MyBB Improper Input Validation Vulnerability (CVE-2019-12831)

WordPress Plugin WP HTML Author Bio Cross-Site Scripting (1.2.0)

Severity

Medium

Classification

CVE-2013-5314 CWE-707

Tags

Missing Update Known Vulnerabilities