CVE-2025-48376

CVE-2025-48376 affects DNN (DotNetNuke) prior to 9.13.9. A malicious SuperUser (Host) could craft a request to use an external URL for a site export, which could then be imported. The issue is fixed in version 9.13.9. Other related issues (CVE-2025-48377, CVE-2025-48378) are reported by Nessus bu...

DEBIAN-CVE-2013-4556

Cross-site scripting XSS vulnerability in the author page prive/formulaires/editerauteur.php in SPIP before 2.1.24 and 3.0.x before 3.0.12 allows remote attackers to inject arbitrary web script or HTML via the urlsite parameter...

UBUNTU-CVE-2013-4556

Cross-site scripting XSS vulnerability in the author page prive/formulaires/editerauteur.php in SPIP before 2.1.24 and 3.0.x before 3.0.12 allows remote attackers to inject arbitrary web script or HTML via the urlsite parameter...

PT-2013-5071

Name of the Vulnerable Software and Affected Versions SPIP versions prior to 2.1.24 SPIP versions 3.0.x prior to 3.0.12 Description A cross-site scripting XSS issue exists in the author page, specifically in the prive/formulaires/editer auteur.php file, allowing remote attackers to inject arbitra...