| Package | Affected versions | Patched versions |
|---|---|---|
| serendipity | = 1.1.3 |
The "Extended properties for entries" (entryproperties) plugin in serendipity_event_entryproperties.php in Serendipity 1.1.3 allows remote authenticated users to bypass password protection and "deliver custom entryproperties settings to the Serendipity Frontend" via a certain request that modifies the password being checked.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free