cve.nowby Sazabi

Spip vulnerabilities

34 CVEs and advisories name Spip as an affected vendor, newest first. Follow it as a feed.

CVE-2025-71240SPIP < 4.2.15 Cross-Site Scripting via Code TagsMedium · 4.8Feb 19, 2026
CVE-2023-53900Spip 4.1.10 Admin Account Spoofing via Malicious SVG UploadMedium · 4.8Dec 16, 2025
CVE-2024-8517SPIP Bigup Multipart File Upload OS Command InjectionCritical · 9.8Sep 6, 2024
CVE-2024-7954SPIP porte_plume Plugin Arbitrary PHP ExecutionCritical · 9.8Aug 23, 2024