Hi,

The following vulnerability was published for spip.

Filling the bug for tracking purposes.

CVE-2023-53900[0]:
| Spip 4.1.10 contains a file upload vulnerability that allows
| attackers to upload malicious SVG files with embedded external
| links. Attackers can trick administrators into clicking a crafted
| SVG logo that redirects to a potentially dangerous URL through
| improper file upload filtering.


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2023-53900
https://www.cve.org/CVERecord?id=CVE-2023-53900
[1] https://www.exploit-db.com/exploits/51557

Regards,
Salvatore