Full title: SPIP 3.1 Cross Site Scripting / Header Injection Vulnerabilities Category: web applications Platform: php SPIP version 3.1 suffers from head injection and cross site scripting vulnerabilities. # 0day.today @ http://0day.today/