| Package | Affected versions | Patched versions |
|---|---|---|
| spip | ≥ 3.2.0, < 3.2.7 | 3.2.7 |
_core_/plugins/medias in SPIP 3.2.x before 3.2.7 allows remote authenticated authors to inject content into the database.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free