A Cross-site Scripting (XSS) vulnerability exists in the Serendipity freetag plugin before 3.30 in the tagcloud parameter to plugins/serendipity_event_freetag/tagcloud.swf.
- https://packetstormsecurity.com/files/105054/Secunia-Security-Advisory-46005.html
No PoCs found on GitHub currently.