CVE-2008-0751: s9y Serendipity Event Freetag

Medium severity, CVSS 4.3. EPSS: 2.2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the Freetag before 2.96 plugin for S9Y Serendipity, when using Internet Explorer 6 or 7, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to plugin/tag/.

Affected products

• s9y Serendipity Event Freetag: before 2.96 (fixed in 2.96)

Published 2008-02-13. Last modified 2026-06-16.