Textpattern 4.7.3 contains an aribtrary file load via the file_insert function in include/txp_file.php.

Published Jun 21, 2021 · Updated Aug 4, 2024 · Assigned by mitre