Skip to content
OpenAdvisories

Product · Textpattern

Textpattern CMS

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2021-47976

    TextPattern CMS 4.9.0-dev Authenticated Remote Code Execution via Plugin Upload

    TextPattern CMS 4.9.0-dev contains a remote code execution vulnerability that allows authenticated attackers to upload arbitrary PHP files by exploiting the plugin upload functionality. Attackers can authenticate, retrieve a CSRF token from the plugin event p…

    Textpattern Textpattern CMS
  • High 8.8
    CVE-2021-47943

    TextPattern CMS 4.8.7 Remote Code Execution via File Upload

    TextPattern CMS 4.8.7 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands by uploading malicious PHP files through the file upload functionality. Attackers can upload a PHP shell via the Files secti…

    Textpattern Textpattern CMS