Skip to content
Threat Feed
Subscribe

Product

SPIP (< 4.4.16)

1 brief RSS
high advisory

Multiple Vulnerabilities in SPIP CMS Lead to Data Confidentiality Loss

Multiple vulnerabilities, including SQL injection and indirect remote code injection (XSS), were discovered in SPIP Content Management System versions prior to 4.4.16, allowing an attacker to compromise data confidentiality and execute malicious code in user browsers.

SPIP vulnerability web-application sqli xss cms
3t