Unscored DLA-760-1 2 CVEs

spip - security update

Published Dec 24, 2016 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 7	spip	2.1.17-1+deb7u8

Vulnerabilities 2

Unscored —

CVE-2016-9997

SPIP 3.1.x suffers from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/puce_statut.php involving the `$…

spip spip Debian Ubuntu

Dec 17, 2016
Unscored —

CVE-2016-9998

SPIP 3.1.x suffer from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/info_plugin.php involving the `$p…

spip spip Debian Ubuntu

Dec 17, 2016