https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T20:00:23.479706+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-27473 CVE-2026-27473 — SPIP < 4.4.9 Stored Cross-Site Scripting via Syndicated Sites 2026-10-18T20:00:23.481217+00:00

Affected: SPIP

SPIP before 4.4.9 allows Stored Cross-Site Scripting (XSS) via syndicated sites in the private area. The #URL_SYNDIC output is not properly sanitized on the private syndicated site page, allowing an attacker who can set a malicious syndication URL to inject persistent scripts that execute when other administrators view the syndicated site details.