CVE-2026-67350

MEDIUM 4.3

Serendipity < 2.6.1 Open Redirect via exit.php

CVSS Score

4.3

EPSS Score

0.0%

EPSS Percentile

0th

Serendipity before 2.6.1 contains an open redirect vulnerability in exit.php that allows unauthenticated attackers to redirect users to arbitrary external sites by supplying a malicious Base64-encoded url parameter when the Track Exits plugin is configured with commentredirection set to s9y. Attackers can craft trusted-looking URLs leveraging the legitimate blog domain to conduct phishing, deliver malware, or bypass URL reputation filters.

CWE	CWE-601
Vendor	s9y
Product	serendipity
Published	Jul 31, 2026

Stay Ahead of the Next One

Get instant alerts for s9y serendipity

Be the first to know when new medium vulnerabilities affecting s9y serendipity are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

Affected Versions

s9y / Serendipity

0 < 2.6.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/s9y/Serendipity/security/advisories/GHSA-77rw-27c5-4hxm vulncheck.com: https://www.vulncheck.com/advisories/serendipity-open-redirect-via-exit-php

Credits

Vaibhav Kubade (@DevVaibhav07)