CVE-2016-9681: XSS
Published Dec 25, 2016
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in Serendipity before 2.0.5 allow remote authenticated users to inject arbitrary web script or HTML via a category or directory name.
Affected Software
1 affected component
S9Y serendipity<=2.0.4
Remediation
Event History
Dec 25, 2016
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-9681?
CVE-2016-9681 is classified as a medium severity vulnerability due to its potential for cross-site scripting (XSS) attacks.
2
How do I fix CVE-2016-9681?
To fix CVE-2016-9681, upgrade Serendipity to version 2.0.5 or later.
3
Who is affected by CVE-2016-9681?
CVE-2016-9681 affects all Serendipity installations prior to version 2.0.5.
4
What type of vulnerability is CVE-2016-9681?
CVE-2016-9681 is a cross-site scripting (XSS) vulnerability.
5
Can CVE-2016-9681 be exploited by unauthenticated users?
No, CVE-2016-9681 requires remote authenticated users to exploit the vulnerability.