agentprime: spipEvery new CVE for spip.https://agentprime.io/CVE-2026-122032: SPIP before 4.4.29 Authenticated SQL Injection via where Parameterhttps://agentprime.io/advisories/CVE-2026-122032/https://agentprime.io/advisories/CVE-2026-122032/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 15:17:01 GMTCVECVE-2026-109378: SPIP before 4.4.18 SSRF via HTTP Redirects in recuperer_urlhttps://agentprime.io/advisories/CVE-2026-109378/https://agentprime.io/advisories/CVE-2026-109378/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 20:55:10 GMTCVECVE-2026-72710: SPIP < 4.4.18 RCE via editer_objet.php Job Queue Injectionhttps://agentprime.io/advisories/CVE-2026-72710/https://agentprime.io/advisories/CVE-2026-72710/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Sep 2026 16:39:22 GMTCVEcriticalCVE-2026-72709: SPIP < 4.4.18 Missing Authorization via ecrire/action/https://agentprime.io/advisories/CVE-2026-72709/https://agentprime.io/advisories/CVE-2026-72709/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Sep 2026 16:38:18 GMTCVEcriticalCVE-2026-72708: SPIP < 4.4.18 Unauthenticated Blind SQL Injection via sitemap.xml.htmlhttps://agentprime.io/advisories/CVE-2026-72708/https://agentprime.io/advisories/CVE-2026-72708/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Sep 2026 16:37:06 GMTCVECVE-2026-77806: Code injection in SPIPhttps://agentprime.io/advisories/CVE-2026-77806/https://agentprime.io/advisories/CVE-2026-77806/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 13:37:43 GMTCVEcriticalCVE-2026-77647: Code injection in SPIPhttps://agentprime.io/advisories/CVE-2026-77647/https://agentprime.io/advisories/CVE-2026-77647/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Aug 2026 22:24:39 GMTCVEcriticalCVE-2026-66738: SPIP < 4.4.18 Code Injection via Navigation Endpoint on SQLitehttps://agentprime.io/advisories/CVE-2026-66738/https://agentprime.io/advisories/CVE-2026-66738/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 15:41:06 GMTCVECVE-2026-48832: Open redirect in SPIPhttps://agentprime.io/advisories/CVE-2026-48832/https://agentprime.io/advisories/CVE-2026-48832/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sun, 24 May 2026 22:36:35 GMTCVECVE-2026-8430: SPIP < 4.4.14 Remote Code Execution via nginxhttps://agentprime.io/advisories/CVE-2026-8430/https://agentprime.io/advisories/CVE-2026-8430/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 May 2026 18:43:25 GMTCVEcriticalCVE-2026-8429: SPIP < 4.4.14 Remote Code Execution via Private Spacehttps://agentprime.io/advisories/CVE-2026-8429/https://agentprime.io/advisories/CVE-2026-8429/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 May 2026 18:32:17 GMTCVECVE-2026-33549: SPIP: SPIP 4.4.10 through 4.4.12 before 4.4.13 allows unintended privilege assignment (of…https://agentprime.io/advisories/CVE-2026-33549/https://agentprime.io/advisories/CVE-2026-33549/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 22 Mar 2026 02:03:47 GMTCVECVE-2026-22205: SPIP < 4.4.10 Authentication Bypass via PHP Type Jugglinghttps://agentprime.io/advisories/CVE-2026-22205/https://agentprime.io/advisories/CVE-2026-22205/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Feb 2026 20:18:14 GMTCVECVE-2026-22206: SPIP < 4.4.10 SQL Injection RCE via Union & PHP Tagshttps://agentprime.io/advisories/CVE-2026-22206/https://agentprime.io/advisories/CVE-2026-22206/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Feb 2026 20:17:58 GMTCVECVE-2026-27475: SPIP < 4.4.9 Insecure Deserializationhttps://agentprime.io/advisories/CVE-2026-27475/https://agentprime.io/advisories/CVE-2026-27475/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Feb 2026 18:39:24 GMTCVEcriticalCVE-2026-27474: SPIP < 4.4.9 Cross-Site Scripting in Private Area (Incomplete Fix)https://agentprime.io/advisories/CVE-2026-27474/https://agentprime.io/advisories/CVE-2026-27474/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Feb 2026 18:38:57 GMTCVECVE-2026-27473: SPIP < 4.4.9 Stored Cross-Site Scripting via Syndicated Siteshttps://agentprime.io/advisories/CVE-2026-27473/https://agentprime.io/advisories/CVE-2026-27473/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Feb 2026 18:38:26 GMTCVECVE-2026-27472: SPIP < 4.4.9 Blind Server-Side Request Forgery via Syndicated Siteshttps://agentprime.io/advisories/CVE-2026-27472/https://agentprime.io/advisories/CVE-2026-27472/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Feb 2026 18:38:02 GMTCVECVE-2026-26223: SPIP < 4.4.8 Cross-Site Scripting via Iframe Tags in Private Areahttps://agentprime.io/advisories/CVE-2026-26223/https://agentprime.io/advisories/CVE-2026-26223/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Feb 2026 15:26:05 GMTCVECVE-2026-26345: SPIP < 4.4.8 Cross-Site Scripting in Public Areahttps://agentprime.io/advisories/CVE-2026-26345/https://agentprime.io/advisories/CVE-2026-26345/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Feb 2026 15:25:06 GMTCVECVE-2025-71244: SPIP < 4.4.5 Open Redirect via Login Formhttps://agentprime.io/advisories/CVE-2025-71244/https://agentprime.io/advisories/CVE-2025-71244/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Feb 2026 14:58:16 GMTCVECVE-2025-71242: SPIP < 4.3.6 Authorization Bypass Leading to Content Disclosurehttps://agentprime.io/advisories/CVE-2025-71242/https://agentprime.io/advisories/CVE-2025-71242/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Feb 2026 14:58:14 GMTCVECVE-2025-71241: SPIP < 4.3.6 Cross-Site Scripting in Private Areahttps://agentprime.io/advisories/CVE-2025-71241/https://agentprime.io/advisories/CVE-2025-71241/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Feb 2026 14:58:13 GMTCVECVE-2025-71240: SPIP < 4.2.15 Cross-Site Scripting via Code Tagshttps://agentprime.io/advisories/CVE-2025-71240/https://agentprime.io/advisories/CVE-2025-71240/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Feb 2026 14:58:12 GMTCVECVE-2023-53900: Spip 4.1.10 Admin Account Spoofing via Malicious SVG Uploadhttps://agentprime.io/advisories/CVE-2023-53900/https://agentprime.io/advisories/CVE-2023-53900/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Dec 2025 17:06:24 GMTCVECVE-2024-8517: SPIP Bigup Multipart File Upload OS Command Injectionhttps://agentprime.io/advisories/CVE-2024-8517/https://agentprime.io/advisories/CVE-2024-8517/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.95 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Sep 2024 15:55:35 GMTCVEcriticalCVE-2024-7954: SPIP porte_plume Plugin Arbitrary PHP Executionhttps://agentprime.io/advisories/CVE-2024-7954/https://agentprime.io/advisories/CVE-2024-7954/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.90 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Aug 2024 17:43:20 GMTCVEcritical