CVE-2026-27474

creationtimestamp| type| source ---|---|--- 2026-09-01 12:00:05+00:00| seen| https://t.me/GithubRedTeam/100615 2026-09-02 01:05:08+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/100615...

CVE-2026-27474

SPIP before 4.4.9 allows Cross-Site Scripting XSS in the private area, complementing an incomplete fix from SPIP 4.4.8. The echappeantixss function was not systematically applied to input, form, button, and anchor a HTML tags, allowing an attacker to inject malicious scripts through these element...

Linux Distros Unpatched Vulnerability : CVE-2026-27474

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SPIP before 4.4.9 allows Cross-Site Scripting XSS in the private area, complementing an incomplete fix from SPIP 4.4.8. The echappeantixss function was not...