CVE-2022-28959: XSS
Published May 19, 2022
·Updated
Last updated 4 March 2025
Other sources
Multiple cross-site scripting (XSS) vulnerabilities in the component /spip.php of Spip Web Framework v3.1.13 and below allows attackers to execute arbitrary web scripts or HTML.
— MITRE
Affected Software
2 affected componentsFixes available
Spip SPIP<=3.1.13
debian/spip
3.2.11-3+deb11u103.2.11-3+deb11u74.3.6+dfsg-1
Remediation
Event History
May 19, 2022
CVE Published
via MITRE·08:26 PM
Data Sourced
via MITRE·08:26 PM
Description
Mar 4, 2025
Data Sourced
via Launchpad·02:29 AM
Description
Mar 8, 2025
Data Sourced
via Ubuntu·02:29 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for the Spip Web Framework XSS vulnerabilities?
The vulnerability ID for the Spip Web Framework XSS vulnerabilities is CVE-2022-28959.
2
What is the severity of CVE-2022-28959?
The severity of CVE-2022-28959 is medium.
3
How can these XSS vulnerabilities be exploited?
These XSS vulnerabilities can be exploited by attackers to execute arbitrary web scripts or HTML.
4
Which version of the Spip Web Framework is affected by CVE-2022-28959?
The version of the Spip Web Framework affected by CVE-2022-28959 is v3.1.13 and below.
5
Are there any fixes or patches available for CVE-2022-28959?
Yes, fixes or patches are available for CVE-2022-28959. It is recommended to update to Spip Web Framework version 3.2.8 or 3.1.13.