Description

Multiple cross-site scripting (XSS) vulnerabilities in Serendipity 0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) templatedropdown and (2) shoutbox plugins.

Remediation

References

CVE-2005-1713

Related Vulnerabilities

WordPress Plugin YAS Slideshow Arbitrary File Upload (3.4)

WordPress Plugin Affiliates Multiple Cross-Site Scripting Vulnerabilities (2.13.1)

Nexus Repository Manager Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2020-15012)

Jenkins Insufficient Session Expiration Vulnerability (CVE-2019-1003049)

qdPM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-26166)

Severity

Medium

Classification

CVE-2005-1713

Tags

Missing Update Known Vulnerabilities