Skip to content
OpenAdvisories
Unscored DSA-5028-1 4 CVEs

spip - security update

Published Dec 22, 2021 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 10 spip 3.2.4-1+deb10u5
Debian · 11 spip 3.2.11-3+deb11u1

Vulnerabilities 4

  • Unscored —

    SPIP 4.0.0 is affected by a Cross Site Scripting (XSS) vulnerability. To exploit the vulnerability, a visitor must brow…

  • Unscored —

    SPIP 4.0.0 is affected by a Cross Site Scripting (XSS) vulnerability in ecrire/public/interfaces.php, adding the functi…

  • Unscored —

    SPIP 4.0.0 is affected by a Cross Site Request Forgery (CSRF) vulnerability in ecrire/public/aiguiller.php, ecrire/publ…

  • Unscored —

    SPIP 4.0.0 is affected by a remote command execution vulnerability. To exploit the vulnerability, an attacker must craf…