Approved changes feed: RSS · Atom

cpe:2.3:a:spip:spip:2.1.23:*:*:*:*:*:*:*

part: a version: 2.1.23 update: *

VendorSpip (07f60ada-7acf-5eb6-a7f1-b34680eac704)
ProductSpip (f4205da0-8b50-5b7e-bb5d-d003199a6313)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/spip purl2cpe 2026-06-01 10:16:58.256156
pkg:deb/ubuntu/spip purl2cpe 2026-06-01 10:16:58.256158
pkg:github/spip/spip purl2cpe 2026-06-01 10:16:58.256159

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-7303 vulnerable 2026-06-08 05:05:09.585283 Details available
Multiple cross-site scripting (XSS) vulnerabilities in (1) squelettes-dist/formulaires/inscription.php and (2) prive/forms/editer_auteur.php in SPIP before 2.1.25 and 3.0.x before 3.0.13 allow remote attackers to inject arbitrary web script or HTML via the author name field.
Published: 2014-01-30T21:00:00.000Z
Updated: 2024-08-06T18:01:20.570Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.