Security Advisories | Entries from Monday, May 30. 2011

Warning: opendir(/var/www/html/web1/serendipity/plugins/serendipity_event_dpsyntaxhighlighter/sh/3.0.83.2/scripts/): failed to open dir: No such file or directory in /var/www/html/web1/serendipity/plugins/serendipity_event_dpsyntaxhighlighter/serendipity_event_dpsyntaxhighlighter.php on line 26

Warning: Invalid argument supplied for foreach() in /var/www/html/web1/serendipity/plugins/serendipity_event_dpsyntaxhighlighter/serendipity_event_dpsyntaxhighlighter.php on line 170
Skip to content

SSCHADV2011-004 - Cross-Site Scripting vulnerability in Serendipity Plugin "serendipity_event_freetag"

Posted by on Monday, May 30. 2011

Advisory:	XSS vulnerability in Serendipity Plugin "serendipity_event_freetag"
Advisory ID:	SSCHADV2011-004
Author:	Stefan Schurtz
Affected Software:	Successfully tested on: serendipity_event_freetag – version 3.21
Vendor URL:	http://www.s9y.org
Vendor Status:	Version 3.22 – Fix possible XSS
CVE-ID:	-

======================
Vulnerability Description:
======================

This is a Cross-Site Scripting vulnerability

==============
Technical Details:
==============

Continue reading "SSCHADV2011-004 - Cross-Site Scripting vulnerability in Serendipity Plugin "serendipity_event_freetag""