Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-53620

A cross-site scripting (XSS) vulnerability in the Article module of SPIP v4.3.3 allows authenticated attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Title parameter.

Published

2024-11-26T19:15:31.127

Last Modified

2025-07-03T00:32:56.547

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 4.8 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-79
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application spip spip 4.3.3 Yes
References