CVE-2011-3610

A Cross-site Scripting (XSS) vulnerability exists in the Serendipity freetag plugin before 3.30 in the tagcloud parameter to plugins/serendipity_event_freetag/tagcloud.swf.

Score

CVSS 3.1 6.1 Medium

Status

Modified - secalert@redhat.com

Published

2020-01-22

Last modified

2024-08-06

Weaknesses

CWE-79

Affected products

• Serendipity Event Freetag (S9y)
• Serendipity Freetag Plugin (Serendipity)

References

• https://git.schokokeks.org/freewvs.git/blob/ddc4be296c9c49987b53be064d6d2a9d12f50452/freewvsdb/plugins.freewvs
• https://packetstormsecurity.com/files/105054/Secunia-Security-Advisory-46005.html
• https://www.openwall.com/lists/oss-security/2011/10/10/3