CVE-2008-0751

Cross-site scripting (XSS) vulnerability in the Freetag before 2.96 plugin for S9Y Serendipity, when using Internet Explorer 6 or 7, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to plugin/tag/.

View graph Watch Export

CVSS v3.1

—

EPSS

2.22%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Connections

2 relationships

CWE-79

source

Timeline

disclosure → media coverage

Feb 13, 2008

Disclosure — published as a CVE record. · last revised by NVD Apr 23, 2026