VYPR

Xinha

by Serendipity

CVEs (3)

  • CVE-2011-1134CriNov 5, 2019
    risk 0.64cvss 9.8epss 0.03

    Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in the image manager.

  • CVE-2011-1135MedNov 5, 2019
    risk 0.40cvss 6.1epss 0.02

    Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in plugins/ExtendedFileManager/manager.php and plugins/ImageManager/manager.php.

  • CVE-2011-1133MedNov 5, 2019
    risk 0.40cvss 6.1epss 0.02

    Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code via plugins/ExtendedFileManager/backend.php.