UBUNTU-CVE-2021-44122

SPIP 4.0.0 is affected by a Cross Site Request Forgery CSRF vulnerability in ecrire/public/aiguiller.php, ecrire/public/balises.php, ecrire/balise/formulaire.php. To exploit the vulnerability, a visitor must visit a malicious website which redirects to the SPIP website. It is also possible to...

PT-2022-11997 · Spip +2 · Spip +2

Name of the Vulnerable Software and Affected Versions: SPIP version 4.0.0 Description: The issue is related to a Cross Site Request Forgery CSRF vulnerability in files such as ecrire/public/aiguiller.php, ecrire/public/balises.php, and ecrire/balise/formulaire .php. To exploit this, a visitor mus...