Description
Cross-site scripting (XSS) vulnerability in Serendipity before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the serendipity[entry_id] parameter in an "edit" admin action to serendipity_admin.php.
Remediation
References
Related Vulnerabilities
WordPress 4.5.x PHP Object Injection (4.5 - 4.5.23)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-2246)
Jenkins Incorrect Authorization Vulnerability (CVE-2023-27899)
WordPress Plugin Network Publisher 'networkpub_key' Parameter Cross-Site Scripting (5.0.1)
Liferay DXP Incorrect Authorization Vulnerability (CVE-2025-62259)