Security Advisory

CVE-2019-11870

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-05-09 21:25:09

Last updated 2024-08-04 23:03:32

Assigner mitre

State PUBLISHED

Description

Serendipity before 2.1.5 has XSS via EXIF data that is mishandled in the templates/2k11/admin/media_choose.tpl Editor Preview feature or the templates/2k11/admin/media_items.tpl Media Library feature.

← Browse all CVEs View on cve.org ↗