Description

Cross-site scripting (XSS) vulnerability in compat.php in Serendipity before 0.7.1 allows remote attackers to inject arbitrary web script or HTML via the searchTerm variable.

Remediation

References

CVE-2004-2525

Related Vulnerabilities

OpenSSL Inadequate Encryption Strength Vulnerability (CVE-2014-0224)

Craft CMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2024-37843)

WordPress Plugin Theme Blvd Sliders Multiple Security Bypass Vulnerabilities (1.2.3)

WordPress Plugin 10Web AI Assistant-AI content writing assistant Security Bypass (1.0.18)

Oracle Database Server CVE-2015-0371 Vulnerability (CVE-2015-0371)

Severity

Medium

Classification

CVE-2004-2525

Tags

Missing Update Known Vulnerabilities