s9y
Security Risk Profile
51
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 61 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from October 21, 2004 to present
61
Total CVEs
26
Critical+High
0
Exploited
14
Unpatched
Threat Assessment
Avg CVSS
6.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
14
Critical/High
Risk Level
51/100
medium
Severity Distribution
Critical
6High
20Medium
33Low
2Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
XSS
27
2
SQL Injection
8
3
CSRF
7
4
Malicious File Upload
6
5
SSRF
1
Most Affected Products
1. S9Y serendipity535
2. S9Y Serendipity74
3. Xinha WYSIWYG editor16
4. debian/serendipity4
5. serendipity Serendipity3
Recent Vulnerabilities
See more →CVE-2026-39971
CVSS 7.2high
Serendipity: Host Header Injection leads to SMTP header injection via unvalidated HTTP_HOST
4/14/2026
CVE-2026-39963
CVSS 6.9medium
Serendipity: Host Header Injection enables authentication cookie scoping to an attacker-controlled domain
4/14/2026
CVE-2023-53932
CVSS 5.4medium
Serendipity 2.4.0 Stored Cross-Site Scripting via Admin Entry Creation
12/17/2025🔧 No Patch
CVE-2023-53933
CVSS 8.8high
Serendipity 2.4.0 Authenticated Remote Code Execution via File Upload
12/17/2025🔧 No Patch
CVE-2024-58282
CVSS 8.6high
Serendipity 2.5.0 Remote Code Execution via Authenticated Media Upload
12/10/2025🔧 No Patch
CVE-2023-31576
CVSS 8.8high
5/16/2023🔧 No Patch
CVE-2020-10964
CVSS 9.8critical
3/25/2020🔧 No Patch
CVE-2011-3610
CVSS 6.1medium
1/22/2020🔧 No Patch
CVE-2011-4090
CVSS 6.1medium
11/26/2019
CVE-2011-1135
CVSS 6.1medium
11/5/2019
Monitor s9y in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.