📦 Serendipity

This vulnerability in Serendipity blog software allows remote attackers to execute arbitrary PHP code on Windows systems. Attackers can rename uploaded files to have a .php extension by exploiting fil...

CVE-2023-53933 is a remote code execution vulnerability in Serendipity 2.4.0 that allows authenticated attackers to upload malicious PHP files with .phar extensions via the media upload endpoint. This...

Serendipity 2.5.0 contains a remote code execution vulnerability where authenticated administrators can upload malicious PHP files through the media upload functionality. This allows attackers to exec...

Serendipity 2.4.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious JavaScript into blog entries. When other users view the compromised blog post...