Skip to content
OpenAdvisories

Vendor

Textpattern

3 known vulnerabilities.

Products

Textpattern CMS 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-32986

    Textpattern CMS 4.9.0: Second-Order XSS via Atom Feed Injection

    Textpattern CMS version 4.9.0 contains a second-order cross-site scripting vulnerability that allows attackers to inject malicious scripts by exploiting improper sanitization of user-supplied input in Atom feed XML elements. Attackers can embed unescaped payl…

    Textpattern Textpattern CMS