odt2spip

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

odt2spip records in CISA KEV

No odt2spip vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-71942 CVE-2026-104085 · GHSA-87r4-r3m7-gvjv

OS command injection in odt2spip plugin for SPIP via document filename

MEDIUM 44

odt2spip plugin for SPIP before 4.4.0 contains an OS command injection vulnerability that allows authenticated authors to execute arbitrary commands by uploading a document with a maliciously crafted filename through the…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01986 Published 2026-10-13 Fixed in 4.4.0 CWE-78

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0