CVE-2016-9998
17.12.2016, 03:59
SPIP 3.1.x suffer from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/info_plugin.php involving the `$plugin` parameter, as demonstrated by a /ecrire/?exec=info_plugin URL.
| Vendor | Product | Version |
|---|---|---|
| spip | spip | 3.1.0 |
| spip | spip | 3.1.0:alpha |
| spip | spip | 3.1.0:beta |
| spip | spip | 3.1.0:rc |
| spip | spip | 3.1.0:rc2 |
| spip | spip | 3.1.0:rc3 |
| spip | spip | 3.1.1 |
| spip | spip | 3.1.2 |
| spip | spip | 3.1.3 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| spip |
|