interface_traduction_objets vulnerabilities

2 known vulnerabilities in interface_traduction_objets from SPIP. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  interface_traduction_objets: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-27747Feb 25, 2026SPIP

  The SPIP interface_traduction_objets plugin versions prior to 2.2.2 contain an authenticated SQL injection vulnerability in interface_traduction_objets_pipelines.php. When handling translation requests, the plugin reads the id_parent parameter from user-suppli

• 8.8 High severity

  interface_traduction_objets: Improper Control of Generation of Code

  CVE-2026-27745Feb 25, 2026SPIP

  The SPIP interface_traduction_objets plugin versions prior to 2.2.2 contain an authenticated remote code execution vulnerability in the translation interface workflow. The plugin incorporates untrusted request data into a hidden form field that is rendered wit