Unscored DSA-2794-1 3 CVEs

spip - several

Published Nov 10, 2013 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 6.0	spip	2.1.1-3squeeze7
Debian · 7	spip	2.1.17-1+deb7u2

Vulnerabilities 3

Unscored —

CVE-2013-4555

Cross-site request forgery (CSRF) vulnerability in ecrire/action/logout.php in SPIP before 2.1.24 allows remote attacke…

spip Debian

Nov 15, 2013
Unscored —

CVE-2013-4556

Cross-site scripting (XSS) vulnerability in the author page (prive/formulaires/editer_auteur.php) in SPIP before 2.1.24…

spip Debian

Nov 15, 2013
Unscored —

CVE-2013-4557 Public exploit EPSS 25%

The Security Screen (_core_/securite/ecran_securite.php) before 1.1.8 for SPIP, as used in SPIP 3.0.x before 3.0.12, al…

spip Debian

Nov 15, 2013