CVE-2011-3610: s9y Serendipity Event Freetag

Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days.

A Cross-site Scripting (XSS) vulnerability exists in the Serendipity freetag plugin before 3.30 in the tagcloud parameter to plugins/serendipity_event_freetag/tagcloud.swf.

Affected products

• s9y Serendipity Event Freetag: before 3.30 (fixed in 3.30)

Published 2020-01-22. Last modified 2026-06-16.