medium4.8
CVE-2024-53620
A cross-site scripting (XSS) vulnerability in the Article module of SPIP v4.3.3 allows authenticated attackers to execute arbitrary web scripts or HTML via inj…
Impact
A cross-site scripting (XSS) vulnerability in the Article module of SPIP v4.3.3 allows authenticated attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Title parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Spip | Spip | Version 4.3.3 |