What’s Vulnerable › Vulnerabilities

CVE-2005-1448

• Severity: medium (CVSS 6.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2005-05-03 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in the BBCode plugin for Serendipity before 0.8 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

Affected products

• s9y Serendipity: 0.7, 0.7.1, 0.7_beta1, 0.7_beta2, 0.7_beta3, 0.7_beta4 (+3)

References

• http://secunia.com/advisories/15145
• http://www.osvdb.org/15876
• http://www.s9y.org/63.html#A9
• http://www.securityfocus.com/bid/13411
• http://secunia.com/advisories/15145
• http://www.osvdb.org/15876
• http://www.s9y.org/63.html#A9
• http://www.securityfocus.com/bid/13411

Get alerted when CVE-2005-1448 or the next vulnerability affects your stack