CVE-2006-0518

no score yetEPSS 3.9%

Cross-site scripting (XSS) vulnerability in index.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier allows remote attackers to inject arbitrary web script or HTML via the lang parameter.

EPSS: 3.9% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
Published: 2006-02-02
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

spip:spip

References

http://secunia.com/advisories/18676
http://www.osvdb.org/22849
http://www.securityfocus.com/bid/16461
http://www.vupen.com/english/advisories/2006/0398
http://www.zone-h.org/en/advisories/read/id=8650/

Check your stack JSON