CVE-2023-53932

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2023-53932

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53932.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-53932

Published

2025-12-17T23:15:52.817Z

Modified

2026-04-10T05:07:16.182487Z

Severity

5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

[none]

Details

Serendipity 2.4.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts through blog entry creation. Attackers can craft entries with JavaScript payloads that will execute when other users view the compromised blog post.

References

Affected packages

Git / github.com/s9y/serendipity

Affected ranges

Type

GIT

Repo

https://github.com/s9y/serendipity

Events

Introduced

Last affected

4abf02c1a382c416c87e0848201242a7855a85db

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.0-NA"
        }
    ]
}

Affected versions

2.*

2.1-beta1

2.1-beta2

2.1-beta3

2.1-rc1

2.1.0

2.1.1

2.2.1-alpha1

2.3-beta1

2.3-rc1

2.3.0

2.4-beta1

2.4.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53932.json"