CVE-2022-28960

Published May 19th, 2022

View on NVD ↗

CVSS v3

8.8

HIGH

CVSS v2

6.5

MEDIUM

Affected

1

PROJECT

Description

A PHP injection vulnerability in Spip before v3.2.8 allows attackers to execute arbitrary PHP code via the _oups parameter at /ecrire.

spip/spipUNAVAILABLE

SPIP Core

GitHub

82