Skip to content
OpenAdvisories
Unscored DSA-4798-1 4 CVEs

spip - security update

Published Nov 25, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 spip 3.2.4-1+deb10u3

Vulnerabilities 4

  • Unscored —
    CVE-2020-28984

    prive/formulaires/configurer_preferences.php in SPIP before 3.2.8 does not properly validate the couleur, display, disp…

    spip spip Debian Ubuntu
  • Unscored —
    CVE-2022-28959

    Multiple cross-site scripting (XSS) vulnerabilities in the component /spip.php of Spip Web Framework v3.1.13 and below …

    spip spip Debian Ubuntu
  • Unscored —
    CVE-2022-28960

    A PHP injection vulnerability in Spip before v3.2.8 allows attackers to execute arbitrary PHP code via the _oups parame…

    spip spip Debian Ubuntu
  • Unscored —
    CVE-2022-28961

    Spip Web Framework v3.1.13 and below was discovered to contain multiple SQL injection vulnerabilities at /ecrire via th…

    spip spip Debian Ubuntu