GCVE - cpe:2.3:a:spip:spip:2.1.22:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:spip:spip:2.1.22:*:*:*:*:*:*:*

part: a version: 2.1.22 update: *

Vendor	Spip (`07f60ada-7acf-5eb6-a7f1-b34680eac704`)
Product	Spip (`f4205da0-8b50-5b7e-bb5d-d003199a6313`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/spip`	purl2cpe	2026-06-01 10:16:58.256147
`pkg:deb/ubuntu/spip`	purl2cpe	2026-06-01 10:16:58.256149
`pkg:github/spip/spip`	purl2cpe	2026-06-01 10:16:58.256150

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-7303`	vulnerable	2026-06-08 05:05:09.584779	Details available Multiple cross-site scripting (XSS) vulnerabilities in (1) squelettes-dist/formulaires/inscription.php and (2) prive/forms/editer_auteur.php in SPIP before 2.1.25 and 3.0.x before 3.0.13 allow remote attackers to inject arbitrary web script or HTML via the author name field. Published: 2014-01-30T21:00:00.000Z Updated: 2024-08-06T18:01:20.570Z Open on db.gcve.eu Reference links http://secunia.com/advisories/56381 http://core.spip.org/projects/spip/repository/revisions/20902 https://exchange.xforce.ibmcloud.com/vulnerabilities/90643 http://www.securitytracker.com/id/1029703 http://seclists.org/oss-sec/2014/q1/128	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4556`	vulnerable	2026-06-08 05:04:48.234675	Details available Cross-site scripting (XSS) vulnerability in the author page (prive/formulaires/editer_auteur.php) in SPIP before 2.1.24 and 3.0.x before 3.0.12 allows remote attackers to inject arbitrary web script or HTML via the url_site parameter. Published: 2013-11-15T18:16:00.000Z Updated: 2024-08-06T16:45:15.144Z Open on db.gcve.eu Reference links https://www.debian.org/security/2013/dsa-2794 http://core.spip.org/projects/spip/repository/revisions/20880 http://www.spip.net/fr_article5646.html http://www.securitytracker.com/id/1029317 http://www.openwall.com/lists/oss-security/2013/11/10/4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4555`	vulnerable	2026-06-08 05:04:48.232986	Details available Cross-site request forgery (CSRF) vulnerability in ecrire/action/logout.php in SPIP before 2.1.24 allows remote attackers to hijack the authentication of arbitrary users for requests that logout the user via unspecified vectors. Published: 2013-11-15T18:16:00.000Z Updated: 2024-08-06T16:45:14.815Z Open on db.gcve.eu Reference links https://www.debian.org/security/2013/dsa-2794 http://www.spip.net/fr_article5646.html http://www.securitytracker.com/id/1029317 http://core.spip.org/projects/spip/repository/revisions/20874 http://www.openwall.com/lists/oss-security/2013/11/10/4	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.