Serendipity 1.1.3


Serendipity 1.1.3 has been released due to a SQL injection vulnerability reported by Dr. Neal Krawetz today. It is possible to abuse a ‘commentMode’ variable to inject SQL code that was targeted to the function that fetches comment information. This variable was introduced to Serendipity 1.1, so all prior versions are not affected.

Please update your blogs as soon as possible. For full details, please refer to the release announcement.


Stats for Serendipity