SPIP version 3.1 suffers from head injection and cross site scripting vulnerabilities. Continue reading...