Vulnerabilities > S9Y > Serendipity Event Freetag > 3.01

DATE CVE VULNERABILITY TITLE RISK
2020-01-22 CVE-2011-3610 Cross-site Scripting vulnerability in S9Y Serendipity Event Freetag
A Cross-site Scripting (XSS) vulnerability exists in the Serendipity freetag plugin before 3.30 in the tagcloud parameter to plugins/serendipity_event_freetag/tagcloud.swf.
network
s9y CWE-79
4.3
2009-09-24 CVE-2009-3337 SQL Injection vulnerability in S9Y Serendipity Event Freetag
SQL injection vulnerability in the Freetag (serendipity_event_freetag) plugin before 3.09 for Serendipity (S9Y) allows remote attackers to execute arbitrary SQL commands via an unspecified parameter associated with Meta keywords in a blog entry.
network
low complexity
s9y CWE-89
7.5