CVE-2023-53932: Serendipity 2.4.0 Stored Cross-Site Scripting via Admin Entry Creation
Serendipity 2.4.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts through blog entry creation. Attackers can craft entries with JavaScript payloads that will execute when other users view the compromised blog post.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-53932?
CVE-2023-53932 is rated as a medium severity vulnerability due to its potential to allow script injection by authenticated users.
How do I fix CVE-2023-53932?
To fix CVE-2023-53932, you should update Serendipity to the latest version that addresses this stored cross-site scripting vulnerability.
Who is affected by CVE-2023-53932?
Authenticated users of Serendipity version 2.4.0 are affected by CVE-2023-53932.
What are the potential impacts of CVE-2023-53932?
The potential impacts of CVE-2023-53932 include unauthorized script execution in the context of other users' sessions leading to data theft or website defacement.
Is CVE-2023-53932 exploitable by unauthenticated users?
No, CVE-2023-53932 can only be exploited by authenticated users who can create blog entries.