CVE-2011-4090 Serendipity before 1.6 has an XSS issue in the karma plugin which may allow privilege escalation.
MediumCVSS 6.1
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Serendipity before 1.6 has an XSS issue in the karma plugin which may allow privilege escalation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| s9y/serendipity | < 1.6 | 1.6 |
| serendipity | = before 1.6 | No fix listed |
References
- access.redhat.com broken-link
- seclists.org mailing-list third-party-advisory
- security-tracker.debian.org third-party-advisory