Some vulnerabilities have been reported in Crafty Syntax Live Help, which can be exploited by malicious people to conduct cross-site scripting attacks.
Hanno Boeck has discovered two vulnerabilities in Serendipity, which can be exploited by malicious users to conduct cross-site scripting and script insertion attacks.