Description

Cross-site scripting (XSS) vulnerability in Serendipity before 1.5.4, when "Remember me" logins are enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2010-2957

Related Vulnerabilities

Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2014-0118)

Microsoft SQL Server CVE-2023-21713 Vulnerability (CVE-2023-21713)

WordPress Plugin WooCommerce Stock Manager Cross-Site Request Forgery (2.5.7)

OpenSSL DEPRECATED: Code Vulnerability (CVE-2015-0287)

MySQL CVE-2021-35635 Vulnerability (CVE-2021-35635)

Severity

Low

Classification

CVE-2010-2957 CWE-707

Tags

Missing Update Known Vulnerabilities