CVE-2020-35854

2021-01-2618:15:55

Google

osv.dev

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.6%

JSON

Textpattern 4.8.4 is affected by cross-site scripting (XSS) in the Body parameter.

CPENameOperatorVersion
textpatterneq4.6.2
textpatterneq4.7.0-beta
textpatterneq4.7.3
textpatterneq4.6.0-beta
textpatterneq4.7.0-beta.2
textpatterneq4.8.0-beta.3
textpatterneq4.3.0
textpatterneq4.6.0
textpatterneq4.6.0-beta.3
textpatterneq4.5.1

Name	Operator	Version
textpattern	eq	4.6.2
textpattern	eq	4.7.0-beta
textpattern	eq	4.7.3
textpattern	eq	4.6.0-beta
textpattern	eq	4.7.0-beta.2
textpattern	eq	4.8.0-beta.3
textpattern	eq	4.3.0
textpattern	eq	4.6.0
textpattern	eq	4.6.0-beta.3
textpattern	eq	4.5.1