Textpattern ≫ Textpattern

30 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.

5.4

CVE-2021-28002

Exploit

EPSS 0.23%
Veröffentlicht 19.08.2021 14:39:31
Zuletzt bearbeitet 21.11.2024 05:58:58

A persistent cross-site scripting vulnerability was discovered in the Excerpt parameter in Textpattern CMS 4.9.0 which allows remote attackers to execute arbitrary code via a crafted payload entered into the URL field. The vulnerability is triggered ...

5.4

CVE-2021-28001

Exploit

EPSS 0.34%
Veröffentlicht 19.08.2021 14:39:31
Zuletzt bearbeitet 21.11.2024 05:58:58

A cross-site scripting vulnerability was discovered in the Comments parameter in Textpattern CMS 4.8.4 which allows remote attackers to execute arbitrary code via a crafted payload entered into the URL field. The vulnerability is triggered by users v...

4.8

CVE-2020-23239

Exploit

EPSS 0.3%
Veröffentlicht 26.07.2021 20:15:08
Zuletzt bearbeitet 21.11.2024 05:13:39

Cross Site Scripting (XSS) vulnerability in Textpattern CMS 4.8.1 via Custom fields in the Menu Preferences feature.

9.8

CVE-2020-19510

Exploit

EPSS 0.43%
Veröffentlicht 21.06.2021 19:15:07
Zuletzt bearbeitet 21.11.2024 05:09:13

Textpattern 4.7.3 contains an aribtrary file load via the file_insert function in include/txp_file.php.

6.5

CVE-2021-30209

Exploit

EPSS 0.15%
Veröffentlicht 15.04.2021 14:15:17
Zuletzt bearbeitet 21.11.2024 06:03:31

Textpattern V4.8.4 contains an arbitrary file upload vulnerability where a plug-in can be loaded in the background without any security verification, which may lead to obtaining system permissions.

4.8