Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j8xx-87x5-273w

Опубликовано: 18 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 5.1
CVSS3: 4.6

Описание

Serendipity 2.4.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts through blog entry creation. Attackers can craft entries with JavaScript payloads that will execute when other users view the compromised blog post.

Serendipity 2.4.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts through blog entry creation. Attackers can craft entries with JavaScript payloads that will execute when other users view the compromised blog post.

EPSS

Процентиль: 8%
0.0003
Низкий

5.1 Medium

CVSS4

4.6 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
около 2 месяцев назад

Serendipity 2.4.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts through blog entry creation. Attackers can craft entries with JavaScript payloads that will execute when other users view the compromised blog post.

CVSS3: 5.4
debian
около 2 месяцев назад

Serendipity 2.4.0 contains a stored cross-site scripting vulnerability ...

EPSS

Процентиль: 8%
0.0003
Низкий

5.1 Medium

CVSS4

4.6 Medium

CVSS3

Дефекты

CWE-79