← Database

CVE-2022-28959

MEDIUM CVSS: 6.1 Published: 2022-05-19 Modified: 2026-06-17

Description

Multiple cross-site scripting (XSS) vulnerabilities in the component /spip.php of Spip Web Framework v3.1.13 and below allows attackers to execute arbitrary web scripts or HTML.

Affected Platforms

Spip Spip

Weakness Type

CWE-79

References