Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: s9y Component: Serendipity Event Freetag Clear all filters
TI-2011-03184 CVE-2011-3610 · GHSA-q2hh-33rr-fpj4

Cross-site scripting in serendipity freetag plugin

Priority LOW 30

A Cross-site Scripting (XSS) vulnerability exists in the Serendipity freetag plugin before 3.30 in the tagcloud parameter to plugins/serendipity_event_freetag/tagcloud.swf.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01222 Published 2020-01-22 Fixed in 3.30 CWE-79
TI-2008-00717 CVE-2008-0751 · GHSA-phfp-fpw5-wg8h

Cross-site scripting (XSS) vulnerability in the Freetag before 2.96 plugin for S9Y…

Priority LOW 24

Cross-site scripting (XSS) vulnerability in the Freetag before 2.96 plugin for S9Y Serendipity, when using Internet Explorer 6 or 7, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to plu…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02221 Published 2008-02-13 No fix listed CWE-79