Description

Cross-site scripting (XSS) vulnerability in serendipity/serendipity_admin_image_selector.php in Serendipity before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the serendipity[textarea] parameter. NOTE: this issue might be resultant from cross-site request forgery (CSRF).

Remediation

References

CVE-2012-2331

Related Vulnerabilities

WordPress Plugin Donation Forms by Charitable-Donations & Fundraising Platform for WordPress Security Bypass (1.5.13)

jQuery Validation Other Vulnerability (CVE-2022-31147)

WordPress Plugin YITH WooCommerce Bulk Product Editing Security Bypass (1.2.13)

WordPress Plugin JobBoardWP-Job Board Listings and Submissions Cross-Site Scripting (1.0.7)

WordPress Plugin UiPress lite-Effortless custom dashboards, admin themes and pages SQL Injection (3.4.06)

Severity

Medium

Classification

CVE-2012-2331 CWE-707

Tags

Missing Update Known Vulnerabilities