VendorsS9Yserendipity2.4.0
Vulnerabilities

S9Y Serendipity 2.4.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2023-31576
An arbitrary file upload vulnerability in Serendipity 2.4-beta1 allows attackers to execute arbitrary code via a crafted HTML or Javascript file.
Published 2023-05-16 · Modified
8.8EPSS 0.011
CVE-2023-53933
Serendipity 2.4.0 Authenticated Remote Code Execution via File Upload
Published 2025-12-17 · Analyzed
8.8EPSS 0.010
CVE-2023-53932
Serendipity 2.4.0 Stored Cross-Site Scripting via Admin Entry Creation
Published 2025-12-17 · Modified
5.4EPSS 0.002