s9y vulnerabilities
8 published CVEs name s9y among the affected products.
- 8Published CVEs8 of them scored
- 8Last 12 monthspublished in the last year
- 0Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-73629
Serendipity before 2.6.0 SSRF via hex IPv4 and IPv6 addresses
s9y · Serendipity
High8.4 - CVE-2026-73628
Serendipity 2.3.5 Reflected XSS via search clean-URL route
s9y · Serendipity
Medium5.3 - CVE-2026-67350
Serendipity < 2.6.1 Open Redirect via exit.php
s9y · Serendipity
Low2.1 - CVE-2026-67351
Serendipity < 2.6.1 Authentication Bypass via Username Collision
s9y · Serendipity
High8.7 - CVE-2026-39971
Serendipity: Host Header Injection leads to SMTP header injection via unvalidated HTTP_HOST
s9y · Serendipity
High7.2 - CVE-2026-39963
Serendipity: Host Header Injection enables authentication cookie scoping to an attacker-controlled domain
s9y · Serendipity
Medium6.9 - CVE-2023-53933
Serendipity 2.4.0 Authenticated Remote Code Execution via File Upload
s9y · Serendipity
High8.7 - CVE-2023-53932
Serendipity 2.4.0 Stored Cross-Site Scripting via Admin Entry Creation
s9y · Serendipity
Medium5.1