CVE-2025-71243

This repository contains a functional exploit for CVE-2025-71243, an unauthenticated Remote Code Execution (RCE) vulnerability in the SPIP Saisies plugin. The exploit leverages improper input sanitization in the `_anciennes_valeurs` parameter to inject PHP code into a template rendered with `interdire_scripts=false`.

This Metasploit module exploits an unauthenticated PHP code injection vulnerability in the SPIP Saisies plugin (CVE-2025-71243) by injecting malicious PHP code via the '_anciennes_valeurs' form parameter, which is rendered unsanitized in a hidden field with 'interdire_scripts=false'.