Read the docs

s9y

Records65All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high22CVSS 7.0–8.9

Exploited now

s9y records in CISA KEV

No s9y vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

3 records in Serendipity Event Freetag · all components

Priority LOW 30

A Cross-site Scripting (XSS) vulnerability exists in the Serendipity freetag plugin before 3.30 in the tagcloud parameter to plugins/serendipity_event_freetag/tagcloud.swf.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01222 Published 2020-01-22 Fixed in 3.30 CWE-79
Priority LOW 24

Cross-site scripting (XSS) vulnerability in the Freetag before 2.96 plugin for S9Y Serendipity, when using Internet Explorer 6 or 7, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to plu…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02221 Published 2008-02-13 No fix listed CWE-79
Open these records in search →