Skip to content
OpenAdvisories
Unscored DLA-2867-1 4 CVEs

spip - security update

Published Dec 29, 2021 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 9 spip 3.1.4-4~deb9u4+deb9u2

Vulnerabilities 4

  • Unscored —
    CVE-2021-44118

    SPIP 4.0.0 is affected by a Cross Site Scripting (XSS) vulnerability. To exploit the vulnerability, a visitor must brow…

    spip spip Debian Ubuntu
  • Unscored —
    CVE-2021-44120

    SPIP 4.0.0 is affected by a Cross Site Scripting (XSS) vulnerability in ecrire/public/interfaces.php, adding the functi…

    spip spip Debian Ubuntu
  • Unscored —
    CVE-2021-44122

    SPIP 4.0.0 is affected by a Cross Site Request Forgery (CSRF) vulnerability in ecrire/public/aiguiller.php, ecrire/publ…

    spip spip Debian Ubuntu
  • Unscored —
    CVE-2021-44123

    SPIP 4.0.0 is affected by a remote command execution vulnerability. To exploit the vulnerability, an attacker must craf…

    spip spip Debian Ubuntu