Cross-Site Scripting Vulnerability in Serendipity by S9Y
CVE-2015-2289

Currently unrated

Key Information:

Vendor: S9y
Status: Serendipity
Vendor: CVE Published:; 23 March 2015

What is CVE-2015-2289?

A cross-site scripting vulnerability exists in Serendipity prior to version 2.0.1, allowing remote authenticated editors to inject arbitrary web scripts or HTML through the 'serendipity[cat][name]' parameter in 'serendipity_admin.php' when creating a new category. This can lead to unauthorized manipulation of content and could compromise the security of the site.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch