CVE:CVE-2005-1448
CNNVD:CNNVD-200505-883
Serendipity 0.8之前版本中BBCode插件存在跨站脚本(XSS)漏洞，远程攻击者可通过未知向量执行任意Web脚本或HTML。
solution:Upgrade s9y serendipity to a higher version than 0.7,0.7.1,0.7_beta1,0.7_beta2,0.7_beta3,0.7_beta4,0.7_rc1,0.8_beta5,0.8_beta6,and avoid the version 0.7,0.7.1,0.7_beta1,0.7_beta2,0.7_beta3,0.7_beta4,0.7_rc1,0.8_beta5,0.8_beta6