References https://nvd.nist.gov/vuln/detail/CVE-2025-71243 https://www.cve.org/CVERecord?id=CVE-2025-71243 https://www.vulncheck.com/advisories/spip-saisies-plugin-remote-code-execution https://github.com/Chocapikk/CVE-2025-71243 https://blog.spip.net/Mise-a-jour-critique-de-securite-pour-le-plugin-Saisies.html https://chocapikk.com/posts/2026/spip-saisies-rce/ https://plugins.spip.net/saisies https://www.cvedetails.com/cve/CVE-2025-71243/ https://www.sentinelone.com/vulnerability-database/cve-2025-71243/ https://chocapikk.com/posts/2026/spip-plugins-vulnerabilities/
Related VulnerabilitiesPoCCVE-2026-77806: SPIP < 4.4.22 - Unauthenticated RCEPoCCVE-2025-71243: SPIP Saisies - Remote Code ExecutionCVE-2023-27372: SPIP Remote Command ExecutionPoCCVE-2016-7981: SPIP <3.1.2 - Cross-Site ScriptingPoCCVE-2023-27372: SPIP - Remote Command ExecutionPoCCVE-2024-7954: SPIP Porte Plume Plugin - Remote Code ExecutionPoCCVE-2024-8517: SPIP BigUp Plugin - Remote Code ExecutionPoCCVE-2024-7954: SPIP Porte Plume Plugin rcePoCspip-install: SPIP Install - ExposureSPIP BigUp Plugin /spip.php 命令执行漏洞(CVE-2024-8517)SPIP porte_plume 插件 /index.php 代码执行漏洞(CVE-2024-7954)