s9y Serendipity versions prior to 2.0.5 suffer from a cross site request forgery vulnerability.