CVE-2007-6390

NONE

Cross-site request forgery (CSRF) vulnerability in the mycalendar plugin before 0.13 for Serendipity allows remote attackers to perform actions as blog administrators, which can be leveraged to conduc

Published: 12/17/2007Updated: 4/9/2025
View on NVDView on MITRE

Description

Cross-site request forgery (CSRF) vulnerability in the mycalendar plugin before 0.13 for Serendipity allows remote attackers to perform actions as blog administrators, which can be leveraged to conduct cross-site scripting (XSS) attacks on the blog page.

AI AnalysisPowered by AI

Affected Products

serendipityserendipity

References