Unrated severityNVD Advisory· Published Apr 23, 2008· Updated Jun 16, 2026

CVE-2008-1385

Description

Cross-site scripting (XSS) vulnerability in the Top Referrers (aka referrer) plugin in Serendipity (S9Y) before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the Referer HTTP header.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

S9y/Serendipityinferred
Range: <1.3.1
Serendipity/Serendipityllm-fuzzy
Range: <1.3.1

Patches

Vulnerability mechanics

References

blog.s9y.org/archives/193-Serendipity-1.3.1-released.htmlnvdPatch
www.securityfocus.com/bid/28885nvdExploitPatch
secunia.com/advisories/29942nvdVendor Advisory
archives.neohapsis.com/archives/fulldisclosure/2008-04/0590.htmlnvd
int21.de/cve/CVE-2008-1385-s9y.htmlnvd
www.securityfocus.com/archive/1/491176/100/0/threadednvd
www.securitytracker.com/idnvd
www.vupen.com/english/advisories/2008/1348/referencesnvd
exchange.xforce.ibmcloud.com/vulnerabilities/41965nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.004
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000