CVE-2015-2289

Cross-site scripting (XSS) vulnerability in templates/2k11/admin/entries.tpl in Serendipity before 2.0.1 allows remote authenticated editors to inject…

published March 23, 2015

CVSS
—
EPSS
2%
Percentile
76.1
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in templates/2k11/admin/entries.tpl in Serendipity before 2.0.1 allows remote authenticated editors to inject arbitrary web script or HTML via the serendipity[cat][name] parameter to serendipity_admin.php, when creating a new category.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01642 · 76.1th percentile
Published
2015-03-23T16:00Z
EPSS history
Timeline
  • 23 MAR 16:00Z
    Cross-site scripting (XSS) vulnerability in templates/2k11/admin/entries.tpl in Serendipity before 2.0.1 allows remote authenticated editors to inject…
    cvelistv5