CVE-2023-53932

MEDIUM

5.4

Description

Serendipity 2.4.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts through blog entry creation. Attackers can craft entries with JavaScript payloads that will execute when other users view the compromised blog post.

Details CVE

Score CVSS v3.15.4

SeveriteMEDIUM

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisLOW

Interaction utilisateurREQUIRED

Publie12/17/2025

Derniere modification12/27/2025

Sourcenvd

Observations honeypot0

Produits affectes

s9y:serendipity

Faiblesses (CWE)

CWE-79

References

https://docs.s9y.org/(disclosure@vulncheck.com)

https://www.exploit-db.com/exploits/51373(disclosure@vulncheck.com)

https://www.vulncheck.com/advisories/serendipity-stored-cross-site-scripting-via-admin-entry-creation(disclosure@vulncheck.com)

https://www.exploit-db.com/exploits/51373(134c704f-9b21-4f2e-91b3-4a467353bcc0)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.