CVE-2023-53932

Опубликовано: 17 дек. 2025

Источник: nvd

CVSS3: 5.4

EPSS Низкий

Описание

Serendipity 2.4.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts through blog entry creation. Attackers can craft entries with JavaScript payloads that will execute when other users view the compromised blog post.

Ссылки

https://docs.s9y.org/
Product
https://www.exploit-db.com/exploits/51373
Exploit
Third Party Advisory
VDB Entry
https://www.vulncheck.com/advisories/serendipity-stored-cross-site-scripting-via-admin-entry-creation
Exploit
Third Party Advisory
https://www.exploit-db.com/exploits/51373
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:s9y:serendipity:2.4.0:-:*:*:*:*:*:*

EPSS

Процентиль: 8%

0.0003

Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVE-2023-53932

CVSS3: 5.4

debian

около 2 месяцев назад

Serendipity 2.4.0 contains a stored cross-site scripting vulnerability ...

GHSA-j8xx-87x5-273w

CVSS3: 4.6

github