CVE-2023-53932

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-53932
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53932.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-53932
Published
2025-12-17T22:44:59.094Z
Modified
2026-07-08T08:05:28.599817527Z
Severity
  • 5.1 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N CVSS Calculator
Summary
Serendipity 2.4.0 Stored Cross-Site Scripting via Admin Entry Creation
Details

Serendipity 2.4.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts through blog entry creation. Attackers can craft entries with JavaScript payloads that will execute when other users view the compromised blog post.

Database specific 
{
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "2.4.0"
                },
                {
                    "last_affected": "2.4.0"
                }
            ]
        }
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53932.json",
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-79"
    ]
}
References

Affected packages

Git / github.com/s9y/serendipity

Affected ranges

Type
GIT
Repo
https://github.com/s9y/serendipity
Events
Introduced
4abf02c1a382c416c87e0848201242a7855a85db
Last affected
4abf02c1a382c416c87e0848201242a7855a85db
Database specific 
{
    "source": "CPE_STRING",
    "cpe": "cpe:2.3:a:s9y:serendipity:2.4.0:-:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "2.4.0-NA"
        },
        {
            "last_affected": "2.4.0-NA"
        }
    ]
}

Affected versions

2.*
2.4.0
2.4.0-NA

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53932.json"