Description

Cross-site scripting (XSS) vulnerability in serendipity_admin_image_selector.php in Serendipity 1.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the serendipity[htmltarget] parameter.

Remediation

References

CVE-2013-5314

Related Vulnerabilities

WordPress Plugin WooCommerce Product Feed for Google, Facebook, eBay and Many More Security Bypass (2.2.26)

MySQL CVE-2016-5624 Vulnerability (CVE-2016-5624)

WordPress 3.9.x Cross-Site Request Forgery (3.9 - 3.9.26)

PrestaShop Improper Authentication Vulnerability (CVE-2021-21308)

WordPress Plugin Elementor Pro Security Bypass (3.11.6)

Severity

Medium

Classification

CVE-2013-5314 CWE-707

Tags

Missing Update Known Vulnerabilities