CVE-2015-8603: XSS
Cross-site scripting (XSS) vulnerability in Serendipity before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the serendipity[entryid] parameter in an "edit" admin action to serendipityadmin.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-8603?
CVE-2015-8603 is classified as a moderate severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2015-8603?
To fix CVE-2015-8603, you should upgrade Serendipity to version 2.0.3 or higher.
What is affected by CVE-2015-8603?
CVE-2015-8603 affects Serendipity versions prior to 2.0.3, specifically those using the serendipity[entry_id] parameter.
What type of vulnerability is CVE-2015-8603?
CVE-2015-8603 is a Cross-Site Scripting (XSS) vulnerability that allows attackers to inject arbitrary web scripts.
Who can exploit CVE-2015-8603?
CVE-2015-8603 can be exploited by remote attackers with access to the admin editing functionality in Serendipity.