CVE-2005-1448

Published: May 3, 2005Modified: Apr 16, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the BBCode plugin for Serendipity before 0.8 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

Affected (9)

Products: S9y: Serendipity

S9y

1 product

Serendipity

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
S9y Serendipity	Version 0.7.1
S9y Serendipity	Version 0.7
S9y Serendipity	Version 0.7_beta1
S9y Serendipity	Version 0.7_beta2
S9y Serendipity	Version 0.7_beta3
S9y Serendipity	Version 0.7_beta4
S9y Serendipity	Version 0.7_rc1
S9y Serendipity	Version 0.8_beta5
S9y Serendipity	Version 0.8_beta6