Description
Cross-site scripting (XSS) vulnerability in compat.php in Serendipity before 0.7.1 allows remote attackers to inject arbitrary web script or HTML via the searchTerm variable.
Remediation
References
Related Vulnerabilities
Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-8563)
Moodle Exposure of Resource to Wrong Sphere Vulnerability (CVE-2023-5545)
MySQL Incorrect Authorization Vulnerability (CVE-2025-50085)
Joomla! Core 1.5.x Variable Injection (1.5.0 - 1.5.6)
WordPress Plugin Ajax Gallery 'list.php' SQL Injection (3.0)