SPIP interface_traduction_objets vulnerabilities (CVE)

CVE records published for SPIP interface_traduction_objets, newest first. Follow to get an email when a new one appears.

2 results
8.8High
CVE-2026-27745

SPIP interface_traduction_objets < 2.2.2 Authenticated RCE

SPIP interface_traduction_objets

The SPIP interface_traduction_objets plugin versions prior to 2.2.2 contain an authenticated remote code execution vulnerability in the translation interface workflow. The plugin incorporates untrusted request data into a hidden form field that is rendered wi…