Skip to content
OpenAdvisories

Product · SPIP

interface_traduction_objets

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-27745

    SPIP interface_traduction_objets < 2.2.2 Authenticated RCE

    The SPIP interface_traduction_objets plugin versions prior to 2.2.2 contain an authenticated remote code execution vulnerability in the translation interface workflow. The plugin incorporates untrusted request data into a hidden form field that is rendered wi…

    SPIP interface_traduction_objets
  • High 8.8
    CVE-2026-27747

    SPIP interface_traduction_objets < 2.2.2 Authenticated SQL Injection

    The SPIP interface_traduction_objets plugin versions prior to 2.2.2 contain an authenticated SQL injection vulnerability in interface_traduction_objets_pipelines.php. When handling translation requests, the plugin reads the id_parent parameter from user-suppl…

    SPIP interface_traduction_objets