CVE-2022-28960

Publication date

2022-05-19 20:26:14

Family

mitre

State

PUBLISHED

Description

A PHP injection vulnerability in Spip before v3.2.8 allows attackers to execute arbitrary PHP code via the _oups parameter at /ecrire.