tocsin

Debian/spip: unknown

Multiple cross-site scripting (XSS) vulnerabilities in SPIP 1.9.x before 1.9.2.o, 2.0.x before 2.0.18, and 2.1.x before 2.1.13 allow remote attackers to inject arbitrary web script or HTML via unspeci

Action: Upgrade spip to 2.1.13-1 or later.

Affected

introducedfixedlast affected
02.1.13-1-

Fixed versions

2.1.13-1

Sources

published · modified · JSON