CVE-2019-16391

SPIP before 3.1.11 and 3.2 before 3.2.5 allows authenticated visitors to modify any published content and execute other modifications in the database

published September 17, 2019

CVSS
—
EPSS
1%
Percentile
73.1
In the wild
Unconfirmed
What it is

SPIP before 3.1.11 and 3.2 before 3.2.5 allows authenticated visitors to modify any published content and execute other modifications in the database. This is related to ecrire/inc/meta.php and ecrire/inc/securiser_action.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01446 · 73.1th percentile
Published
2019-09-17T20:49Z
EPSS history
Timeline
  • 17 SEP 20:49Z
    SPIP before 3.1.11 and 3.2 before 3.2.5 allows authenticated visitors to modify any published content and execute other modifications in the database
    cvelistv5