CVE-2005-3129: s9y Serendipity

Medium severity, CVSS 5.1. EPSS: 5.5% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in Serendipity 0.8.4 and earlier allows remote attackers to perform unauthorized actions as a logged in user via a link or IMG tag to serendipity_admin.php.

Affected products

• s9y Serendipity: up to and including 0.8.4

Published 2005-10-04. Last modified 2026-06-16.