Cpe:2.3:a:spip:spip:*:*:*:*:*:*:*:*

A critical unauthenticated remote code execution vulnerability in SPIP, involving the X-Spip-Filtre header, has available public proof-of-concept exploits, presenting a high risk for unpatched web servers.

SPIP versions before 4.4.18 are vulnerable to remote code execution due to improper validation of the arg parameter in the editer_objet action, allowing attackers to inject malicious serialized data into the job queue.