Skip to content
OpenAdvisories

Product · Tmrswrr

Textpattern CMS

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.4

    Textpattern CMS 4.8.8 Authenticated Stored Cross-Site Scripting via Article Excerpt

    Textpattern CMS 4.8.8 contains a stored cross-site scripting vulnerability in the article excerpt field that allows authenticated users to inject malicious scripts. Attackers can insert JavaScript payloads into the excerpt, which will execute when the article…