{"id":"CVE-2025-71243","details":"The 'Saisies pour formulaire' (Saisies) plugin for SPIP versions 5.4.0 through 5.11.0 contains a critical Remote Code Execution (RCE) vulnerability. An attacker can exploit this vulnerability to execute arbitrary code on the server. Users should immediately update to version 5.11.1 or later.","modified":"2026-03-15T14:53:28.559529Z","published":"2026-02-19T16:27:12.303Z","references":[{"type":"WEB","url":"https://plugins.spip.net/saisies"},{"type":"ADVISORY","url":"https://blog.spip.net/Mise-a-jour-critique-de-securite-pour-le-plugin-Saisies.html"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/spip-saisies-plugin-remote-code-execution"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.spip.net/spip-contrib-extensions/saisies","events":[{"introduced":"87a52efb4012cc6c5da12d0ab2d3a6e7a8a6ff12"},{"fixed":"a9c460b62a6ae202be106db8d42cc4d6fc1d67dc"}],"database_specific":{"versions":[{"introduced":"5.4.0"},{"fixed":"5.11.1"}]}}],"versions":["5.10.0","v5.11.0","v5.4.0","v5.4.1","v5.5.0","v5.5.1","v5.6.0","v5.6.1","v5.7.0","v5.7.1","v5.7.2","v5.8.0","v5.8.1","v5.8.2","v5.9.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-71243.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}