CVE-2013-5314

Cross-site scripting (XSS) vulnerability in serendipity_admin_image_selector.php in Serendipity 1.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the serendipity[htmltarget] parameter.

Published: Aug 19, 2013
Updated: Nov 9, 2025
CVE: CVE-2013-5314
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

CWE-79

OWASP TOP 10:

A7 - Cross-Site Scripting (XSS)

Affected Software
References

Software	From	Fixed in
s9y / serendipity	-	1.6.2.x
s9y / serendipity	1.0.3	1.0.3.x
s9y / serendipity	1.3	1.3.x
s9y / serendipity	1.1.4	1.1.4.x
s9y / serendipity	0.4	0.4.x
s9y / serendipity	0.8.5	0.8.5.x
s9y / serendipity	0.7	0.7.x
s9y / serendipity	1.1.2	1.1.2.x
s9y / serendipity	1.0.4	1.0.4.x
s9y / serendipity	0.8.3	0.8.3.x
s9y / serendipity	1.5.3	1.5.3.x
s9y / serendipity	0.8.4	0.8.4.x
s9y / serendipity	0.8.2	0.8.2.x
s9y / serendipity	1.0.2	1.0.2.x
s9y / serendipity	1.1.1	1.1.1.x
s9y / serendipity	1.1	1.1.x
s9y / serendipity	0.7.1	0.7.1.x
s9y / serendipity	1.6.1	1.6.1.x
s9y / serendipity	1.0.1	1.0.1.x
s9y / serendipity	1.0	1.0.x
s9y / serendipity	1.5.5	1.5.5.x
s9y / serendipity	1.6	1.6.x
s9y / serendipity	1.3.1	1.3.1.x
s9y / serendipity	0.8.1	0.8.1.x
s9y / serendipity	1.5.1	1.5.1.x
s9y / serendipity	1.5.4	1.5.4.x
s9y / serendipity	0.8	0.8.x
s9y / serendipity	1.2.1	1.2.1.x
s9y / serendipity	1.5.2	1.5.2.x
s9y / serendipity	0.3	0.3.x
s9y / serendipity	0.9.1	0.9.1.x
s9y / serendipity	0.9	0.9.x
s9y / serendipity	1.1.3	1.1.3.x
s9y / serendipity	1.4	1.4.x
s9y / serendipity	1.2	1.2.x
s9y / serendipity	1.4.1	1.4.1.x

Vulnerability Database

310,221

CVE-2013-5314

Deep Security Visibility Without the Complexity