Description

Cross-site scripting (XSS) vulnerability in js/2k11.min.js in the 2k11 theme in Serendipity before 2.0.2 allows remote attackers to inject arbitrary web script or HTML via a user name in a comment, which is not properly handled in a Reply link.

Remediation

References

CVE-2015-6969

Related Vulnerabilities

Magento Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2020-9582)

WordPress Plugin AdServe 'id' Parameter SQL Injection (0.2)

Dolibarr Incorrect Authorization Vulnerability (CVE-2022-0731)

WordPress 4.3.x Multiple Vulnerabilities (4.3 - 4.3.8)

WordPress Plugin Cooked Pro Cross-Site Scripting (1.7.5.5)

Severity

Medium

Classification

CVE-2015-6969 CWE-707

Tags

Missing Update Known Vulnerabilities