CVE-2013-5670. Thanks Garvin Hicking for good communication and for fixing this vulnerability. OpenSysCom did not inform developers of Serendipity before.