CVE-2007-0137: Serendipitynz Serene Bach

Medium severity, CVSS 6.8. EPSS: 1.8% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in SimpleBoxes/SerendipityNZ Serene Bach 2.05R and earlier, and 2.08D and earlier in the 2.08 series; and (2) sb 1.13D and earlier, and 1.18R and earlier in the 1.18 series; allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

• Serendipitynz Serene Bach: version 1.18r only; version 2.05r only; version 2.08d only
• Serendipitynz Serene Bach Sb: version 1.13d only

Published 2007-01-09. Last modified 2026-06-16.