Cross-site scripting (XSS) vulnerability in validerxml.php in SPIP 3.1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the varurl parameter in a valider_xml action.
[ { "events": [ { "introduced": "0" }, { "last_affected": "3.1.2" } ] } ]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-7981.json"