Hello dear reader, This article is the continuation of my Spip research, with a twist! One Spip Unauth RCE Challenge player (@Vozec1) came to me with an extra question after solving my initial challenge: “I think I found another similar bug, are you already aware of this issue?” And I was not (code changes fast)! We therefore worked together to make the most out of it, here’s our co-written story!