Medium severity5.4NVD Advisory· Published Jan 26, 2022· Updated Jun 17, 2026

CVE-2021-44118

Description

SPIP 4.0.0 is affected by a Cross Site Scripting (XSS) vulnerability. To exploit the vulnerability, a visitor must browse to a malicious SVG file. The vulnerability allows an authenticated attacker to inject malicious code running on the client side into web pages visited by other users (stored XSS).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Spip/Spip3 versions
cpe:2.3:a:spip:spip:4.0.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:spip:spip:4.0.0:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: =4.0.0

Patches

Vulnerability mechanics

References

git.spip.net/spip/medias/commit/13c293fabd35e2c152379522c29432423936cbbanvdPatchThird Party Advisory
git.spip.net/spip/spip/commit/1cf91def15966406ddd0488cf9d1ecd1ae82d47anvdPatchThird Party Advisory
git.spip.net/spip/spip/commit/4ccf90a6912d7fab97e1bd5619770c9236cc7357nvdPatchThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000