| Package | Affected versions | Patched versions |
|---|---|---|
| spip | = 4.1.10 |
Spip 4.1.10 contains a file upload vulnerability that allows attackers to upload malicious SVG files with embedded external links. Attackers can trick administrators into clicking a crafted SVG logo that redirects to a potentially dangerous URL through improper file upload filtering.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free