Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Serendipity
(S9y)| Repositories | https://github.com/s9y/Serendipity |
| #Vulnerabilities | 53 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2023-05-16 | CVE-2023-31576 | An arbitrary file upload vulnerability in Serendipity 2.4-beta1 allows attackers to execute arbitrary code via a crafted HTML or Javascript file. | Serendipity | 8.8 | ||
| 2020-03-25 | CVE-2020-10964 | Serendipity before 2.3.4 on Windows allows remote attackers to execute arbitrary code because the filename of a renamed file may end with a dot. This file may then be renamed to have a .php filename. | Serendipity | N/A | ||
| 2019-11-26 | CVE-2011-4090 | Serendipity before 1.6 has an XSS issue in the karma plugin which may allow privilege escalation. | Serendipity | N/A |