Skip to content
OpenAdvisories

Vendor

odt2spip

1 known vulnerabilities.

Products

odt2spip 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-104085

    odt2spip < 4.4.0 OS Command Injection via Document Filename

    odt2spip plugin for SPIP before 4.4.0 contains an OS command injection vulnerability that allows authenticated authors to execute arbitrary commands by uploading a document with a maliciously crafted filename through the document import form. Attackers can em…

    odt2spip odt2spip spip Ubuntu