Unrated severityNVD Advisory· Published Dec 31, 2004· Updated Jun 16, 2026

CVE-2004-2525

Description

Cross-site scripting (XSS) vulnerability in compat.php in Serendipity before 0.7.1 allows remote attackers to inject arbitrary web script or HTML via the searchTerm variable.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Serendipity/Serendipityllm-fuzzy
Range: <0.7.1

Patches

Vulnerability mechanics

References

secunia.com/advisories/13357nvdPatchVendor Advisory
securitytracker.com/idnvdPatch
www.osvdb.org/12177nvdPatchVendor Advisory
www.securityfocus.com/bid/11790nvdPatch
sourceforge.net/tracker/index.phpnvd
exchange.xforce.ibmcloud.com/vulnerabilities/18322nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000