First published: Tue May 03 2005(Updated: )
Cross-site scripting (XSS) vulnerability in the BBCode plugin for Serendipity before 0.8 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Serendipity (S9Y) Freetag Event | =0.8_beta5 | |
Serendipity (S9Y) Freetag Event | =0.7 | |
Serendipity (S9Y) Freetag Event | =0.7_beta1 | |
Serendipity (S9Y) Freetag Event | =0.7.1 | |
Serendipity (S9Y) Freetag Event | =0.7_beta3 | |
Serendipity (S9Y) Freetag Event | =0.8_beta6 | |
Serendipity (S9Y) Freetag Event | =0.7_beta4 | |
Serendipity (S9Y) Freetag Event | =0.7_beta2 | |
Serendipity (S9Y) Freetag Event | =0.7_rc1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-1448 is classified as a medium severity vulnerability.
To fix CVE-2005-1448, upgrade your Serendipity installation to version 0.8 or later.
CVE-2005-1448 affects Serendipity versions prior to 0.8, including 0.7 and its betas.
CVE-2005-1448 is a cross-site scripting (XSS) vulnerability.
Users of affected Serendipity versions are at risk for XSS attacks due to CVE-2005-1448.