CPE

Cpe:2.3:a:spip:crayons_plugin::::::::

1 brief RSS

Unauthenticated RCE in SPIP Crayons Plugin via CVE-2026-104070

The Crayons plugin for SPIP before 3.5.0 contains a missing authorization flaw in crayons_store.php that allows unauthenticated attackers to modify arbitrary objects, leading to remote code execution.

Crayons plugin web-application rce cve-2026-104070

2t 1c 2d ago

Cpe:2.3:a:spip:crayons_plugin:*:*:*:*:*:*:*:*

Unauthenticated RCE in SPIP Crayons Plugin via CVE-2026-104070

Cpe:2.3:a:spip:crayons_plugin::::::::