Skip to content
OpenAdvisories

Product · SPIP

jeux

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-27746

    SPIP jeux < 4.1.1 Reflected XSS via index Parameters

    The SPIP jeux plugin versions prior to 4.1.1 contain a reflected cross-site scripting (XSS) vulnerability in the pre_propre pipeline. The plugin incorporates untrusted request parameters into HTML output without proper output encoding, allowing attackers to i…

    SPIP jeux