Skip to content
OpenAdvisories

Product · Textpattern

Textpattern CMS

3 known vulnerabilities.

All Critical High Medium Low Exploited only

3 results · Feed

  • High 8.8
    CVE-2021-47976

    TextPattern CMS 4.9.0-dev Authenticated Remote Code Execution via Plugin Upload

    TextPattern CMS 4.9.0-dev contains a remote code execution vulnerability that allows authenticated attackers to upload arbitrary PHP files by exploiting the plugin upload functionality. Attackers can authenticate, retrieve a CSRF token from the plugin event p…

    Textpattern Textpattern CMS
  • High 8.8
    CVE-2021-47943

    TextPattern CMS 4.8.7 Remote Code Execution via File Upload

    TextPattern CMS 4.8.7 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands by uploading malicious PHP files through the file upload functionality. Attackers can upload a PHP shell via the Files secti…

    Textpattern Textpattern CMS
  • Medium 6.1
    CVE-2026-32986

    Textpattern CMS 4.9.0: Second-Order XSS via Atom Feed Injection

    Textpattern CMS version 4.9.0 contains a second-order cross-site scripting vulnerability that allows attackers to inject malicious scripts by exploiting improper sanitization of user-supplied input in Atom feed XML elements. Attackers can embed unescaped payl…

    Textpattern Textpattern CMS