Security Advisory

CVE-2016-9998

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2016-12-17 03:34:00

Last updated 2024-08-06 03:07:32

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

SPIP 3.1.x suffer from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/info_plugin.php involving the `$plugin` parameter, as demonstrated by a /ecrire/?exec=info_plugin URL.

← Browse all CVEs View on cve.org ↗