| Package | Affected versions | Patched versions |
|---|---|---|
| spip | ≥ 3.2.0, < 3.2.5< 3.1.11 | 3.2.53.1.11 |
SPIP before 3.1.11 and 3.2 before 3.2.5 allows authenticated visitors to modify any published content and execute other modifications in the database. This is related to ecrire/inc/meta.php and ecrire/inc/securiser_action.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free