Description (CNA)
The 'Saisies pour formulaire' (Saisies) plugin for SPIP versions 5.4.0 through 5.11.0 contains a critical Remote Code Execution (RCE) vulnerability. An attacker can exploit this vulnerability to execute arbitrary code on the server. Users should immediately update to version 5.11.1 or later.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SPIP / Saisies pour formulaire | affected 5.4.0 before 5.11.1 |
CWE
CWE-94
References
- https://blog.spip.net/Mise-a-jour-critique-de-securite-pour-le-plugin-Saisies.html
- https://plugins.spip.net/saisies
- https://www.vulncheck.com/advisories/spip-saisies-plugin-remote-code-execution
ADP enrichment
No English description supplied.
No references supplied.