PublicDate: 2007-12-11 20:46:00 UTC Candidate: CVE-2007-6205 References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6205 Description: Cross-site scripting (XSS) vulnerability in the remote RSS sidebar plugin (serendipity_plugin_remoterss) in S9Y Serendipity before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via a link in an RSS feed. Ubuntu-Description: Notes: Bugs: Priority: low Discovered-by: Assigned-to: CVSS: upstream_serendipity: released (1.2.1) dapper_serendipity: DNE edgy_serendipity: DNE feisty_serendipity: needed (reached end-of-life) gutsy_serendipity: needed (reached end-of-life) hardy_serendipity: not-affected (1.2.1-1) intrepid_serendipity: not-affected (1.2.1-1) devel_serendipity: not-affected (1.2.1-1)