/Vulnerability Library

SPIP Saisies - Remote Code Execution

CVE-2025-71243
Verified

Description

SPIP Saisies plugin 5.4.0 through 5.11.0 contains a remote code execution caused by an unspecified flaw, letting attackers execute arbitrary code on the server, exploit requires no special conditions.

Severity

Critical

CVSS Score

9.8

Exploit Probability

5%

Affected Product

saisies

Published Date

February 22, 2026

Template Author

omarkurt

CVE-2025-71243.yaml
9.8Score

CVSS Metrics

CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVE ID:
cve-2025-71243
CWE ID:
cwe-94

References

https://vulnerability.circl.lu/vuln/cve-2025-71243https://chocapikk.com/posts/2026/spip-saisies-rce/https://github.com/Chocapikk/CVE-2025-71243https://vulnerabletarget.com/VT-2025-71243

Remediation Steps

Update to version 5.11.1 or later.