Description
The 'Saisies pour formulaire' (Saisies) plugin for SPIP versions 5.4.0 through 5.11.0 contains a critical Remote Code Execution (RCE) vulnerability. An attacker can exploit this vulnerability to execute arbitrary code on the server. Users should immediately update to version 5.11.1 or later.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SPIP | Saisies pour formulaire | 5.4.0 – < 5.11.1 | 5.11.1 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 1 module
-
SPIP Saisies Plugin Unauthenticated RCE
exploit/multi/http/spip_saisies_rce
GitHub 1 repository
-
Chocapikk/CVE-2025-71243 ★ 4 · Feb 19, 2026
CVE-2025-71243 - SPIP Saisies Plugin RCE (Unauthenticated PHP Code Injection)
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- SPIP Saisies - Remote Code Execution http/cves/2025/CVE-2025-71243.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
References
- https://blog.spip.net/Mise-a-jour-critique-de-securite-pour-le-plugin-Saisies.html vendor-advisory patch
- https://plugins.spip.net/saisies product
- VulnCheck Advisory: SPIP Saisies Plugin < 5.11.1 Remote Code Execution third-party-advisory