CVE-2006-0518
EPSS 10.4%Published: 2/2/2006Modified: 5/29/2026
Description
Cross-site scripting (XSS) vulnerability in index.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier allows remote attackers to inject arbitrary web script or HTML via the lang parameter.
Affected packages (1)
- Debian/spipfrom 0, < 2.0.6-1