CVE-2007-6205: XSS
Published Dec 11, 2007
·Updated
Cross-site scripting (XSS) vulnerability in the remote RSS sidebar plugin (serendipitypluginremoterss) in S9Y Serendipity before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via a link in an RSS feed.
Affected Software
37 affected components
S9Y serendipity=0.5
S9Y serendipity=0.8_beta5
S9Y serendipity=1.0.3
S9Y serendipity=1.1.4
S9Y serendipity=0.4
S9Y serendipity=0.8.5
S9Y serendipity=0.7
S9Y serendipity=1.0.4
S9Y serendipity=0.7_beta1
S9Y serendipity=1.0_beta3
S9Y serendipity=0.8.3
S9Y serendipity=0.8.4
S9Y serendipity=0.8.2
S9Y serendipity=0.6_rc1
S9Y serendipity=1.1.1
S9Y serendipity=0.8_beta_6
S9Y serendipity=0.7.1
S9Y serendipity=0.5_pl1
S9Y serendipity=1.0_beta1
S9Y serendipity=0.6_pl2
S9Y serendipity=1.0_beta2
S9Y serendipity=0.7_beta3
S9Y serendipity=0.8_beta6
S9Y serendipity=0.7_beta4
S9Y serendipity=0.6_pl1
S9Y serendipity=0.8.1
S9Y serendipity=0.8_beta_5
S9Y serendipity=0.8
S9Y serendipity=0.3
S9Y serendipity=0.6_pl3
S9Y serendipity=0.9.1
S9Y serendipity=0.6_rc2
S9Y serendipity=0.9
S9Y serendipity=1.1.3
S9Y serendipity=0.7_beta2
S9Y serendipity=0.7_rc1
S9Y serendipity=0.6
Remediation
Patch Available
Event History
Dec 11, 2007
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-6205?
CVE-2007-6205 is classified as a moderate severity vulnerability due to the potential for cross-site scripting (XSS) attacks.
2
How do I fix CVE-2007-6205?
To remediate CVE-2007-6205, upgrade to Serendipity version 1.2.1 or later.
3
What type of vulnerability is CVE-2007-6205?
CVE-2007-6205 is a cross-site scripting (XSS) vulnerability.
4
Which versions of Serendipity are affected by CVE-2007-6205?
CVE-2007-6205 affects all Serendipity versions prior to 1.2.1.
5
Who can exploit CVE-2007-6205?
CVE-2007-6205 can be exploited by remote attackers who can send malicious RSS feeds to affected Serendipity installations.