CVE-2023-53932 — Serendipity 2.4.0 Stored Cross-Site Scripting via Admin Entry Creation
Serendipity 2.4.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts through blog entry creation. Attackers can cra…
Published: 2025-12-17 · CVSS: 5.1 · CVSS 4.0
Serendipity 2.4.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts through blog entry creation. Attackers can craft entries with JavaScript payloads that will execute when other users view the compromised blog post.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7