Unrated severityNVD Advisory· Published Mar 24, 2008· Updated Apr 23, 2026
CVE-2008-1476
CVE-2008-1476
Description
Cross-site scripting (XSS) vulnerability in Serendipity (S9Y) before 1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to received trackbacks.
Affected products
26cpe:2.3:a:serendipity:serendipity:*:*:*:*:*:*:*:*+ 25 more
- cpe:2.3:a:serendipity:serendipity:*:*:*:*:*:*:*:*range: <=1.2.1
- cpe:2.3:a:serendipity:serendipity:0.3:*:*:*:*:*:*:*
- cpe:2.3:a:serendipity:serendipity:0.4:*:*:*:*:*:*:*
- cpe:2.3:a:serendipity:serendipity:0.5_pl1:*:*:*:*:*:*:*
- cpe:2.3:a:serendipity:serendipity:0.6_pl3:*:*:*:*:*:*:*
- cpe:2.3:a:serendipity:serendipity:0.7:*:*:*:*:*:*:*
- cpe:2.3:a:serendipity:serendipity:0.7.1:*:*:*:*:*:*:*
- cpe:2.3:a:serendipity:serendipity:0.8:*:*:*:*:*:*:*
- cpe:2.3:a:serendipity:serendipity:0.8.1:*:*:*:*:*:*:*
- cpe:2.3:a:serendipity:serendipity:0.8.2:*:*:*:*:*:*:*
- cpe:2.3:a:serendipity:serendipity:0.8.3:*:*:*:*:*:*:*
- cpe:2.3:a:serendipity:serendipity:0.8.4:*:*:*:*:*:*:*
- cpe:2.3:a:serendipity:serendipity:0.8.5:*:*:*:*:*:*:*
- cpe:2.3:a:serendipity:serendipity:0.9:*:*:*:*:*:*:*
- cpe:2.3:a:serendipity:serendipity:0.9.1:*:*:*:*:*:*:*
- cpe:2.3:a:serendipity:serendipity:1.0:*:*:*:*:*:*:*
- cpe:2.3:a:serendipity:serendipity:1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:serendipity:serendipity:1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:serendipity:serendipity:1.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:serendipity:serendipity:1.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:serendipity:serendipity:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:serendipity:serendipity:1.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:serendipity:serendipity:1.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:serendipity:serendipity:1.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:serendipity:serendipity:1.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:serendipity:serendipity:1.2:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
7- secunia.com/advisories/29398nvdVendor Advisory
- secunia.com/advisories/29502nvdVendor Advisory
- blog.s9y.org/archives/192-Serendipity-1.3-released-addresses-security.htmlnvd
- www.debian.org/security/2008/dsa-1528nvd
- www.securityfocus.com/bid/28298nvd
- www.vupen.com/english/advisories/2008/0925/referencesnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/41343nvd
News mentions
0No linked articles in our index yet.