CVE-2006-0518: Spip

Medium severity, CVSS 4.3. EPSS: 3.9% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in index.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier allows remote attackers to inject arbitrary web script or HTML via the lang parameter.

Affected products

• Spip Spip: up to and including 1.8.2e; up to and including 1.9_alpha2_5539

Published 2006-02-02. Last modified 2026-06-16.