S9Y » Serendipity : Security Vulnerabilities Published In 2019 (Code Execution)
Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in plugins/ExtendedFileManager/manager.php and plugins/ImageManager/manager.php.
| Max Base Score | 6.1 |
| Published | 2019-11-05 |
| Updated | 2019-11-08 |
| EPSS | 0.58% |
Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in the image manager.
| Max Base Score | 9.8 |
| Published | 2019-11-05 |
| Updated | 2019-11-08 |
| EPSS | 1.34% |
Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code via plugins/ExtendedFileManager/backend.php.
| Max Base Score | 6.1 |
| Published | 2019-11-05 |
| Updated | 2019-11-08 |
| EPSS | 0.58% |
3 vulnerabilities found