Unscored CVE-2008-5757 EUVD-2008-5727GHSA-p58w-xvp4-pqvm

Cross-site scripting (XSS) vulnerability in textarea/index.php in Textpattern (aka Txp CMS) 4.0.6 and earlier allows remote authenticated u…

Published Dec 30, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in textarea/index.php in Textpattern (aka Txp CMS) 4.0.6 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the Body parameter in an article action. NOTE: some of these details are obtained from third party information.

References

28793 third-party-advisory
27606 vdb-entry
20080204 [DSECRG-08-008] Textpattern 4.0.5 Multiple Security Vulnerabilities mailing-list