A vulnerability was found in SPIP tickets up to 4.3.2. It has been rated as critical. This issue affects some unknown processing. This manipulation causes code injection.
This vulnerability is registered as CVE-2026-27744. Remote exploitation of the attack is possible. No exploit is available.
Upgrading the affected component is advised.