Description

Cross-site scripting (XSS) vulnerability in the remote RSS sidebar plugin (serendipity_plugin_remoterss) in S9Y Serendipity before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via a link in an RSS feed.

Remediation

References

CVE-2007-6205

Related Vulnerabilities

WordPress Plugin Events Calendar 'ec_management.class.php' Cross-Site Scripting (6.7.11)

WordPress Plugin Spiffy XSPF Player SQL Injection (0.1)

WordPress Plugin WPeMatico RSS Feed Fetcher Cross-Site Scripting (2.6.11)

MySQL CVE-2023-22115 Vulnerability (CVE-2023-22115)

Jenkins Origin Validation Error Vulnerability (CVE-2024-23898)

Severity

Medium

Classification

CVE-2007-6205 CWE-707

Tags

Missing Update Known Vulnerabilities