A vulnerability has been found in SPIP up to 4.4.7 and classified as problematic. Impacted is an unknown function of the component IFRAME Handler. Performing a manipulation results in cross site scripting.

This vulnerability was named CVE-2025-71245. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.