CVE-2016-9997

SPIP 3.1.x suffers from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/puce_statut.php involving the `$id` parameter, as demonstrated by a /ecrire/?exec=puce_statut URL.

Date published : 2016-12-16

http://www.securityfocus.com/bid/95008

https://core.spip.net/projects/spip/repository/revisions/23288