Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2025-71243

SPIP Saisies Plugin < 5.11.1 Remote Code Execution

Description

The 'Saisies pour formulaire' (Saisies) plugin for SPIP versions 5.4.0 through 5.11.0 contains a critical Remote Code Execution (RCE) vulnerability. An attacker can exploit this vulnerability to execute arbitrary code on the server. Users should immediately update to version 5.11.1 or later.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SPIP Saisies pour formulaire

Default version status: unaffected

  • 5.4.0 to < 5.11.1affected

References