https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:14:52 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-73628 <p>Serendipity versions &gt;= 2.3.5 and &lt;= 2.6.0 contain a reflected cross-site scripting vulnerability in the search clean-URL route (/search/&lt;term&gt;). In include/functions_routing.inc.php serveSearch(), the sanitisation pipeline runs urldecode() after HTML-encoding, so a single URL-encoded HTML payload survives strip_tags() and htmlspecialchars() and is then decoded back into live HTML in the page. A crafted search link can execute arbitrary JavaScript in the victim&#39;s browser. Fixed in 2.6.1.</p> <p>Serendipity versions &gt;= 2.3.5 and &lt;= 2.6.0 contain a reflected cross-site scripting vulnerability in the search clean-URL route (/search/&lt;term&gt;). In include/functions_routing.inc.php serveSearch(), the sanitisation pipeline runs urldecode() after HTML-encoding, so a single URL-encoded HTML payload survives strip_tags() and htmlspecialchars() and is then decoded back into live HTML in the page. A crafted search link can execute arbitrary JavaScript in the victim&#39;s browser. Fixed in 2.6.1.</p> https://db.gcve.eu/vuln/fkie_cve-2026-73628 https://db.gcve.eu/vuln/ghsa-4g8w-wg6x-gvqc <p>Serendipity versions &gt;= 2.3.5 and &lt;= 2.6.0 contain a reflected cross-site scripting vulnerability in the search clean-URL route (/search/&lt;term&gt;). In include/functions_routing.inc.php serveSearch(), the sanitisation pipeline runs urldecode() after HTML-encoding, so a single URL-encoded HTML payload survives strip_tags() and htmlspecialchars() and is then decoded back into live HTML in the page. A crafted search link can execute arbitrary JavaScript in the victim&#39;s browser. Fixed in 2.6.1.</p> <p>Serendipity versions &gt;= 2.3.5 and &lt;= 2.6.0 contain a reflected cross-site scripting vulnerability in the search clean-URL route (/search/&lt;term&gt;). In include/functions_routing.inc.php serveSearch(), the sanitisation pipeline runs urldecode() after HTML-encoding, so a single URL-encoded HTML payload survives strip_tags() and htmlspecialchars() and is then decoded back into live HTML in the page. A crafted search link can execute arbitrary JavaScript in the victim&#39;s browser. Fixed in 2.6.1.</p> https://db.gcve.eu/vuln/ghsa-4g8w-wg6x-gvqc