spip Spip Vulnerabilities

Spip Spip vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

22 March 2026

Privilege Escalation in SPIP by SPIP Team
CVE-2026-33549
SpipSpip6.7MEDIUM

26 February 2026

Authentication Bypass Vulnerability in SPIP by SPIP Core Team
CVE-2026-22205
SpipSpip8.7HIGH
SQL Injection Vulnerability in SPIP by SPIP
CVE-2026-22206
SpipSpip8.7HIGH

19 February 2026

Insecure Deserialization Vulnerability in SPIP by SPIP Team
CVE-2026-27475
SpipSpip9.2CRITICAL
Cross-Site Scripting Vulnerability in SPIP by SPIP
CVE-2026-27474
SpipSpip4.8MEDIUM
Stored Cross-Site Scripting Vulnerability in SPIP by SPIP Team
CVE-2026-27473
SpipSpip5.1MEDIUM
Blind Server-Side Request Forgery in SPIP Affected by Vulnerability
CVE-2026-27472
SpipSpip5.3MEDIUM
Cross-Site Scripting Vulnerability in SPIP Affected by Malicious Iframe Tags
CVE-2026-26223
SpipSpip5.1MEDIUM
Cross-Site Scripting Vulnerability in SPIP by SPIP Team
CVE-2026-26345
SpipSpip8.6HIGH
Insecure Deserialization in SPIP Affects Multiple Versions by SPIP Team
CVE-2025-71250
SpipSpip9.2CRITICAL
Cross-Site Scripting Vulnerability in SPIP by SPIP Team
CVE-2025-71249
SpipSpip4.8MEDIUM
Stored Cross-Site Scripting in SPIP by SPIP Team
CVE-2025-71248
SpipSpip5.1MEDIUM
Blind Server-Side Request Forgery in SPIP Affects Multiple Versions
CVE-2025-71247
SpipSpip5.3MEDIUM
Open Redirect Vulnerability in SPIP Web Application by SPIP
CVE-2025-71244
SpipSpip5.1MEDIUM
Authorization Bypass in SPIP by SPIP Team
CVE-2025-71242
SpipSpip5.3MEDIUM
Cross-Site Scripting Vulnerability in SPIP by SPIP team
CVE-2025-71241
SpipSpip4.8MEDIUM
Cross-Site Scripting Vulnerability in SPIP Web Platform
CVE-2025-71240
SpipSpip4.8MEDIUM

16 December 2025

File Upload Vulnerability in SPIP 4.1.10 by SPIP
CVE-2023-53900
SpipSpip👾🟡4.8MEDIUM

26 November 2024

Authenticated Arbitrary File Upload Vulnerability in SPIP Documents Module
CVE-2024-53619
SPIPSpip6.3MEDIUM

6 September 2024

SPIP vulnerable to command injection via multipart file upload
CVE-2024-8517
SpipSpip👾🟡EPSS 93%9.8CRITICAL

23 August 2024

Arbitrary Code Execution Vulnerability in SPIP'sporte_plume Plugin
CVE-2024-7954
SpipSpip👾🟡EPSS 93%📰9.8CRITICAL

4 January 2024

Cross-Site Scripting Vulnerability in SPIP Versions Prior to 4.1.13 and 4.2.7
CVE-2023-52322
SpipSpip6.1MEDIUM

28 February 2023

Remote Code Execution Vulnerability in SPIP Product by SPIP
CVE-2023-27372
SpipSpip👾🟡EPSS 93%9.8CRITICAL

27 February 2023

SQL Injection Vulnerability in SPIP Software by SPIP Team
CVE-2023-24258
SpipSpip9.8CRITICAL

14 December 2022

Remote Code Execution in SPIP by SPIP Team
CVE-2022-37155
SpipSpip8.8HIGH