CVE-2023-53932
Serendipity 2.4.0 Stored Cross-Site Scripting via Admin Entry Creation
概要
Serendipity 2.4.0 Stored Cross-Site Scripting via Admin Entry Creation
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Serendipity 2.4.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts through blog entry creation. Attackers can craft entries with JavaScript payloads that will execute when other users view the compromised blog post.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory vulncheck.com
- report exploit-db.com
- web docs.s9y.org