CVE-2026-26223 | SPIP up to 4.4.7 iFrame cross site scripting

February 19, 2026 Yanac

A vulnerability was found in SPIP up to 4.4.7. It has been classified as problematic. Affected is an unknown function of the component iFrame Handler. This manipulation causes cross site scripting.

The identification of this vulnerability is CVE-2026-26223. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More