Description
Cross-site scripting (XSS) vulnerability in the remote RSS sidebar plugin (serendipity_plugin_remoterss) in S9Y Serendipity before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via a link in an RSS feed.
Remediation
References
Related Vulnerabilities
PostgreSQL Other Vulnerability (CVE-2006-5540)
MySQL CVE-2020-14633 Vulnerability (CVE-2020-14633)
WordPress Plugin Resume Submissions & Job Postings Arbitrary File Upload (2.5.1)
WordPress Plugin My Calendar Multiple Cross-Site Scripting Vulnerabilities (2.3.9)
WordPress Plugin WP Print Friendly Cross-Site Scripting (0.6)