SPIP cross-site scripting vulnerability (CNVD-2016-09663)

SPIP is a free Web-based content publishing system. The system is primarily used for online collaboration. A cross-site scripting vulnerability exists in SPIP versions 1.9.2-SPIP 3.0.7, which can be exploited by attackers to perform unauthorized operations...