Read the docs

SPIP

Records88All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical20CVSS 9.0–10.0
CVSS high29CVSS 7.0–8.9

Exploited now

SPIP records in CISA KEV

No SPIP vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Spip 69 records CRITICAL Interface Traduction Objets 2 records HIGH Jeux 1 record MEDIUM Referer Spam 1 record HIGH Saisies 1 record MEDIUM Tickets 1 record HIGH

Records

1 record in Jeux · all components

TI-2026-22106 CVE-2026-27746 · GHSA-8vx8-439w-j8j5

SPIP jeux < 4.1.1 Reflected XSS via index Parameters

Priority MEDIUM 56

The SPIP jeux plugin versions prior to 4.1.1 contain a reflected cross-site scripting (XSS) vulnerability in the pre_propre pipeline.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.0024 Published 2026-02-25 Fixed in 4.1.1 CWE-79
Open these records in search →