Total vulnerabilities in the database
comment.php in Serendipity through 2.0.5 allows CSRF in deleting any comments.
CVSS v3:
CVSS v2:
CWEs: