CVE-2016-9152

Cross-site scripting XSS vulnerability in ecrire/exec/plonger.php in SPIP 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the rac parameter...

CVE-2016-9152

Cross-site scripting XSS vulnerability in ecrire/exec/plonger.php in SPIP 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the rac parameter...

CVE-2016-9152

Cross-site scripting XSS vulnerability in ecrire/exec/plonger.php in SPIP 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the rac parameter...

PT-2016-7669

Name of the Vulnerable Software and Affected Versions SPIP version 3.1.3 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the rac parameter in the /ecrire/exec/plonger.php endpoint. Recommendations For SPIP version 3.1.3, update to a...

CVE-2016-9152: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in ecrire/exec/plonger.php in SPIP 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the rac parameter...