NVD CVE-2017-5476 January 14, 2017 007admin Serendipity through 2.0.5 allows CSRF for the installation of an event plugin or a sidebar plugin.