Cross Site Scripting Vulnerability in SPIP by SPIP
CVE-2021-44118

5.4MEDIUM

Key Information:

Vendor: Spip
Status: Spip
Vendor: CVE Published:; 26 January 2022

What is CVE-2021-44118?

SPIP 4.0.0 has a vulnerability that allows an authenticated attacker to exploit Cross Site Scripting (XSS) through malicious SVG files. When a user visits a page containing this SVG, the attacker can inject harmful client-side scripts that execute on the browsers of other users. This stored XSS threat emphasizes the importance of proper input validation and sanitation to safeguard users from potential exploits.