CVE-2025-71243

Critical CVSS: 9.3

The 'Saisies pour formulaire' (Saisies) plugin for SPIP versions 5.4.0 through 5.11.0 contains a critical Remote Code Execution (RCE) vulnerability. An attacker can exploit this vulnerability to execute arbitrary code on the server. Users should immediately update to version 5.11.1 or later.

Vendor

Spip

Product

Saisies

CWE

CWE-94

Yayın Tarihi

2026-02-19 16:27:12

Güncelleme

2026-02-26 15:07:48

Source Identifier

disclosure@vulncheck.com

KEV Date Added

Kategoriler

CWE-94 Saisies CRITICAL Spip 2026

Referanslar

https://blog.spip.net/Mise-a-jour-critique-de-securite-pour-le-plugin-Saisies.html https://plugins.spip.net/saisies https://www.vulncheck.com/advisories/spip-saisies-plugin-remote-code-execution

Benzer Kayıtlar

High

CVE-2026-22205

SPIP versions prior to 4.4.10 contain an authentication bypass vulnerability caused by PHP type juggling that allows una…

High

CVE-2026-22206

SPIP versions prior to 4.4.10 contain a SQL injection vulnerability that allows authenticated low-privilege users to exe…

High

CVE-2026-27745

The SPIP interface_traduction_objets plugin versions prior to 2.2.2 contain an authenticated remote code execution vulne…

Medium

CVE-2026-27746

The SPIP jeux plugin versions prior to 4.1.1 contain a reflected cross-site scripting (XSS) vulnerability in the pre_pro…

High

CVE-2026-27747

The SPIP interface_traduction_objets plugin versions prior to 2.2.2 contain an authenticated SQL injection vulnerability…

Critical

CVE-2026-27743

The SPIP referer_spam plugin versions prior to 1.3.0 contain an unauthenticated SQL injection vulnerability in the refer…