https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 25 Oct 2026 23:51:13 +0000 https://cve.radiocsirt.org/vuln/cve-2021-44120 <p>SPIP 4.0.0 is affected by a Cross Site Scripting (XSS) vulnerability in ecrire/public/interfaces.php, adding the function safehtml to the vulnerable fields. An editor is able to modify his personal information. If the editor has an article written and available, when a user goes to the public site and wants to read the author&#39;s information, the malicious code will be executed. The &#34;Who are you&#34; and &#34;Website Name&#34; fields are vulnerable.</p> <p>SPIP 4.0.0 is affected by a Cross Site Scripting (XSS) vulnerability in ecrire/public/interfaces.php, adding the function safehtml to the vulnerable fields. An editor is able to modify his personal information. If the editor has an article written and available, when a user goes to the public site and wants to read the author&#39;s information, the malicious code will be executed. The &#34;Who are you&#34; and &#34;Website Name&#34; fields are vulnerable.</p> https://cve.radiocsirt.org/vuln/cve-2021-44120