CVE-2021-44118

SPIP 4.0.0 is affected by a Cross Site Scripting (XSS) vulnerability

published January 26, 2022

CVSS
—
EPSS
1%
Percentile
55.2
In the wild
Unconfirmed
What it is

SPIP 4.0.0 is affected by a Cross Site Scripting (XSS) vulnerability. To exploit the vulnerability, a visitor must browse to a malicious SVG file. The vulnerability allows an authenticated attacker to inject malicious code running on the client side into web pages visited by other users (stored XSS).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00772 · 55.2th percentile
Published
2022-01-26T11:07Z
EPSS history
Timeline
  • 26 JAN 11:07Z
    SPIP 4.0.0 is affected by a Cross Site Scripting (XSS) vulnerability
    cvelistv5