description: Serendipity before 1.6 has an XSS issue in the karma plugin which may allow privilege escalation.
problem types: Cross-Site Scripting
affected:
{
product: serendipity
vendor: serendipity
versions:
status: affected, version: before 1.6
}