PT-2016-7893

Name of the Vulnerable Software and Affected Versions SPIP versions 3.1.x Description The issue concerns a Reflected Cross Site Scripting problem. It involves the /ecrire/exec/info plugin.php endpoint, specifically the $plugin parameter. An example of exploitation is through a /ecrire/?exec=info...