Skip to content
OpenAdvisories
Unscored DSA-4228-1 1 CVE

spip - security update

Published Jun 14, 2018 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 8 spip 3.0.17-2+deb8u4
Debian · 9 spip 3.1.4-4~deb9u1

Vulnerabilities 1

  • Unscored —

    Cross-site scripting (XSS) vulnerability (stored) in SPIP before 3.1.7 allows remote attackers to inject arbitrary web …