Description
Cross-site scripting (XSS) vulnerability in spell-check-savedicts.php in the htmlarea SpellChecker module, as used in Serendipity before 1.7.3 and possibly other products, allows remote attackers to inject arbitrary web script or HTML via the to_r_list parameter.
Remediation
References
Related Vulnerabilities
WordPress 5.1.x Multiple Vulnerabilities (5.1 - 5.1.5)
MySQL CVE-2015-4905 Vulnerability (CVE-2015-4905)
WordPress Plugin DukaPress Multiple Cross-Site Scripting Vulnerabilities (2.5.9)
WordPress Plugin RapidLoad Power-Up for Autoptimize SQL Injection (1.6.35)
WordPress Plugin Debug Log Manager Information Disclosure (2.2.2)