Exposure of SPIP

CMS
64
exposure score
1,725
sites use
0
exploited
8
critical

CVEs

27 results
CVE-2026-33549MEDIUMSPIP 4.4.10 through 4.4.12 before 4.4.13 allows unintended privilege assignment (of administrator privileges) during the editing of an authoEPSS 0.2%CVE-2026-109378MEDIUMSPIP before 4.4.18 SSRF via HTTP Redirects in recuperer_urlEPSS 0.2%CVE-2025-71244MEDIUMSPIP < 4.4.5 Open Redirect via Login FormEPSS 0.2%CVE-2026-26223MEDIUMSPIP < 4.4.8 Cross-Site Scripting via Iframe Tags in Private AreaEPSS 0.2%CVE-2026-26345HIGHSPIP < 4.4.8 Cross-Site Scripting in Public AreaEPSS 0.2%CVE-2025-71240MEDIUMSPIP < 4.2.15 Cross-Site Scripting via Code TagsEPSS 0.2%CVE-2026-48832LOWaction/cookie.php in ecrire in SPIP before 4.4.15 is prone to an open redirect vulnerability.EPSS 0.2%