Saisies pour formulaire - RCE (CVE-2025-71243)
Description
The 'Saisies pour formulaire' (Saisies) plugin for SPIP versions 5.4.0 through 5.11.0 contains a critical Remote Code Execution (RCE) vulnerability. An attacker can exploit this vulnerability to execute arbitrary code on the server. Users should immediately update to version 5.11.1 or later.
psychologyCrowdSec Analysis
CVE-2025-71243 is a critical remote code execution vulnerability in the 'Saisies pour formulaire' plugin for SPIP versions 5.4.0 through 5.11.0. This flaw allows unauthenticated attackers to execute arbitrary code on the affected server, potentially leading to full system compromise. Immediate updates to version 5.11.1 or later are strongly recommended to mitigate the risk of exploitation.
CrowdSec has been tracking this vulnerability and its exploits since 8th of April 2026.
CrowdSec has not observed any significant exploitation activity targeting CVE-2025-71243 across its network. As a result, no community-driven trend analysis is available for this vulnerability at this time.
Attackers exploit the SPIP Saisies plugin by sending specially crafted requests to the /spip.php?page=contact endpoint, injecting malicious PHP code via the _anciennes_valeurs parameter to achieve remote code execution. This attack does not require authentication and targets publicly accessible SPIP installations running vulnerable plugin versions.
Full Intelligence Available
Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.
| Event | Date |
|---|---|
| CVE Published | 2026-02-19 |
| Rule Released | 2026-04-08 |
| CrowdSec First Seen | 2026-04-09 |