referer_spam vulnerabilities

1 known vulnerability in referer_spam from SPIP. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  referer_spam: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-27743Feb 25, 2026SPIP

  The SPIP referer_spam plugin versions prior to 1.3.0 contain an unauthenticated SQL injection vulnerability in the referer_spam_ajouter and referer_spam_supprimer action handlers. The handlers read the url parameter from a GET request and interpolate it direct