Description

Cross-site scripting (XSS) vulnerability in js/2k11.min.js in the 2k11 theme in Serendipity before 2.0.2 allows remote attackers to inject arbitrary web script or HTML via a user name in a comment, which is not properly handled in a Reply link.

Remediation

References

CVE-2015-6969

Related Vulnerabilities

Internet Information Services Permissions, Privileges, and Access Controls Vulnerability (CVE-1999-0777)

WordPress Plugin RapidLoad Power-Up for Autoptimize Multiple Vulnerabilities (1.7.1)

Drupal Core 8.9.x Cross-Site Request Forgery (8.9.0 - 8.9.18)

WordPress Plugin WP DSGVO Tools (GDPR) PHP Object Injection (2.0.4)

WordPress Plugin WP Easy full backup Information Disclosure (1.4)

Severity

Medium

Classification

CVE-2015-6969 CWE-707

Tags

Missing Update Known Vulnerabilities