CVE-2023-52322 (published 2024-01-04T00:00:00)
ecrire/public/assembler.php in SPIP before 4.1.13 and 4.2.x before 4.2.7 allows XSS because input from _request() is not restricted to safe characters such as alphanumerics.
Affected products: Vendor: n/a
Product: n/a
Versions: n/a