Open Redirect Vulnerability in SPIP Affected by Ecrire Module

CVE-2026-48832

What is CVE-2026-48832?

The Ecrire module in SPIP, prior to version 4.4.15, is susceptible to an open redirect issue via the action/cookie.php file. This vulnerability allows attackers to manipulate URLs, potentially redirecting users to malicious sites without their consent. Proper patching in the latest version is critical to safeguard users from phishing attacks and unauthorized access.

References