SPIP cross-site scripting vulnerability (CNVD-2016-11960)

SPIP is a free Web-based content publishing system. The system is primarily used for online collaboration. A cross-site scripting vulnerability exists in the ecrire/exec/plonger.php file in SPIP version 3.1.3. A remote attacker can exploit this vulnerability to inject arbitrary Web script or HTML...

UBUNTU-CVE-2016-9152

Cross-site scripting XSS vulnerability in ecrire/exec/plonger.php in SPIP 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the rac parameter...