CVE-2016-9681 in Serendipity

Summary

Multiple cross-site scripting (XSS) vulnerabilities in Serendipity before 2.0.5 allow remote authenticated users to inject arbitrary web script or HTML via a category or directory name.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservation

11/30/2016

Disclosure

12/25/2016

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
94682	Serendipity Directory Name cross site scripting	79	Not defined	Official fix	CVE-2016-9681
94681	Serendipity Category Name cross site scripting	79	Not defined	Official fix	CVE-2016-9681

Sources

• MITRE
• NVD
• CVE Details