Cross-site Request Forgery Vulnerability in MyCalendar Plugin for Serendipity
CVE-2007-6390

Currently unrated

Key Information:

Vendor: Serendipity
Status: Serendipity
Vendor: CVE Published:; 17 December 2007

🔔 Create Serendipity Vulnerability Alert

What is CVE-2007-6390?

A cross-site request forgery (CSRF) vulnerability in the MyCalendar plugin prior to version 0.13 for Serendipity enables remote adversaries to execute actions on behalf of blog administrators. This unauthorized access can be exploited to initiate cross-site scripting (XSS) attacks, potentially compromising the integrity of the blog and its users' data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch