CVE-2012-2151

N/A Unknown

Published: August 14, 2012 Modified: April 29, 2026

Description

Multiple cross-site scripting (XSS) vulnerabilities in SPIP 1.9.x before 1.9.2.o, 2.0.x before 2.0.18, and 2.1.x before 2.1.13 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://archives.rezo.net/archives/spip-en.mbox/U5QUZ6WJRAJC7H5BR7W5SQG6WCD3PXL7/

Source: secalert@redhat.com

http://secunia.com/advisories/48939

Source: secalert@redhat.com

Vendor Advisory

http://www.debian.org/security/2012/dsa-2461

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/04/30/4

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/05/01/4

Source: secalert@redhat.com

http://www.osvdb.org/81473

Source: secalert@redhat.com

http://www.securityfocus.com/bid/53216

Source: secalert@redhat.com

http://www.securitytracker.com/id?1026970

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/75104

Source: secalert@redhat.com

http://archives.rezo.net/archives/spip-en.mbox/U5QUZ6WJRAJC7H5BR7W5SQG6WCD3PXL7/