Tag: CVE-2026-104070

CVE-2026-104070 — Critical vulnerability brief

The Crayons plugin for SPIP before 3.5.0 contains a missing authorization vulnerability that allows unauthenticated attackers to modify arbitrary editable object fields…