Launchpad.net

CVE 2011-4090

Serendipity before 1.6 has an XSS issue in the karma plugin which may allow privilege escalation.

See the CVE page on Mitre.org for more details.