Skip to content
OpenAdvisories

Product · SPIP

referer_spam

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-27743

    SPIP referer_spam < 1.3.0 Unauthenticated SQL Injection

    The SPIP referer_spam plugin versions prior to 1.3.0 contain an unauthenticated SQL injection vulnerability in the referer_spam_ajouter and referer_spam_supprimer action handlers. The handlers read the url parameter from a GET request and interpolate it direc…

    SPIP referer_spam