19Oca
CVE-2024-23659 | SPIP up to 4.1.13/4.2.7 File Upload javascript/bigup.js name cross site scripting
A vulnerability was found in SPIP up to 4.1.13/4.2.7 and classified as problematic. Affected by this issue is some unknown functionality of the file javascript/bigup.js of the component File Upload. The manipulation of the argument name leads to cross site scripting. This vulnerability is handled as CVE-2024-23659. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.