| Package | Affected versions | Patched versions |
|---|---|---|
| serendipity | ≤ 0.12 |
Cross-site request forgery (CSRF) vulnerability in the mycalendar plugin before 0.13 for Serendipity allows remote attackers to perform actions as blog administrators, which can be leveraged to conduct cross-site scripting (XSS) attacks on the blog page.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free