4 January 2016
Serendipity version 2.0.3 is now available (security release).Upgrading to Serendipity 2.0.3
Serendipity 2.0.3 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply Serendipity updates as new versions are released, or use Installatron's Clone feature to duplicate an existing Serendipity install to test the 2.0.3 upgrade prior to applying it live. Get started managing your Serendipity installations with InstallatronWhat's New in Serendipity 2.0.3
Happy new Year! Serendipity 2.0.3 has just been released to address a XSS security issue found and reported by Onur Yilmaz and Robert Abela from Netsparker.com. Thanks a lot for contacting us and working with us to address the issue.
The issue only affects logged-in authors, where HTML can be inserted into the comment editing form when they click specially crafted links. Due to the required authentification we consider the issue of medium impact, but suggest everyone to perform the update.