cbcvebase.

Spip Referer Spam vulnerabilities

1 known vulnerability affecting spip/referer_spam.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2026-27743P2CRITICALCVSS 9.8fixed in 1.3.02026-02-25
CVE-2026-27743 [CRITICAL] CWE-89 CVE-2026-27743: The SPIP referer_spam plugin versions prior to 1.3.0 contain an unauthenticated SQL injection vulner The SPIP referer_spam plugin versions prior to 1.3.0 contain an unauthenticated SQL injection vulnerability in the referer_spam_ajouter and referer_spam_supprimer action handlers. The handlers read the url parameter from a GET request and interpolate it directly into SQL LIKE clauses without input validation or parameterization. The endpoints do no
nvd
Spip Referer Spam vulnerabilities | cvebase