CVE:CVE-2004-2525
CNNVD:CNNVD-200412-876
Serendipity 0.7.1之前版本的compat.php存在跨站脚本（XSS）漏洞。远程攻击者可以借助searchTerm变量注入任意web脚本。
solution:Upgrade s9y serendipity to a higher version than 0.3,0.4,0.5,0.5_pl1,0.6,0.6_pl1,0.6_pl2,0.6_pl3,0.6_rc1,0.6_rc2,0.7,0.7_beta1,0.7_beta2,0.7_beta3,0.7_beta4,0.7_rc1,and avoid the version 0.3,0.4,0.5,0.5_pl1,0.6,0.6_pl1,0.6_pl2,0.6_pl3,0.6_rc1,0.6_rc2,0.7,0.7_beta1,0.7_beta2,0.7_beta3,0.7_beta4,0.7_rc1