Description Serendipity 2.0.4 has XSS via the serendipity_admin.php serendipity[body] parameter. Remediation References CVE-2016-10737 Related Vulnerabilities WordPress Plugin Post Form-Registration Form-Profile Form for User Profiles and Content Forms for User Submissions Security Bypass (2.6.2) WordPress Plugin Solve Media CAPTCHA Cross-Site Request Forgery (1.1.0) Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-38902) Ruby on Rails Improper Input Validation Vulnerability (CVE-2008-7248) WordPress Plugin YOP Poll Cross-Site Scripting (6.3.2) Severity Medium Classification CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities CWE-707 CVE-2016-10737