Critical CVE-2026-104070 vulnerability found in SPIP Crayons plugin
A missing authorization vulnerability in the Crayons plugin for SPIP before 3.5.0 allows unauthenticated attackers to modify arbitrary object fields.
A missing authorization vulnerability in the Crayons plugin for SPIP before 3.5.0 allows unauthenticated attackers to modify arbitrary object fields.