Read the docs

Serendipity

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Serendipity records in CISA KEV

No Serendipity vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Serendipity 5 records LOW

Records

5 records in Serendipity · all components

TI-2007-04145 CVE-2007-4282 · GHSA-p6xx-vj76-6hpm

The "Extended properties for entries" (entryproperties) plugin in…

Priority LOW 26

The "Extended properties for entries" (entryproperties) plugin in serendipity_event_entryproperties.php in Serendipity 1.1.3 allows remote authenticated users to bypass password protection and "deliver custom entryproper…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01593 Published 2007-08-09 No fix listed
TI-2007-06096 CVE-2007-6390 · GHSA-pc47-fppf-j85r

Cross-site request forgery (CSRF) vulnerability in the mycalendar plugin before 0.13 for…

Priority LOW 21

Cross-site request forgery (CSRF) vulnerability in the mycalendar plugin before 0.13 for Serendipity allows remote attackers to perform actions as blog administrators, which can be leveraged to conduct cross-site scripti…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00516 Published 2007-12-17 No fix listed CWE-352
Open these records in search →