CVE-2021-30209

2021-04-1514:15:17

Google

osv.dev

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

JSON

Textpattern V4.8.4 contains an arbitrary file upload vulnerability where a plug-in can be loaded in the background without any security verification, which may lead to obtaining system permissions.

CPENameOperatorVersion
textpatterneq4.6.2
textpatterneq4.7.0-beta
textpatterneq4.7.3
textpatterneq4.6.0-beta
textpatterneq4.7.0-beta.2
textpatterneq4.8.0-beta.3
textpatterneq4.3.0
textpatterneq4.6.0
textpatterneq4.6.0-beta.3
textpatterneq4.5.1

Name	Operator	Version
textpattern	eq	4.6.2
textpattern	eq	4.7.0-beta
textpattern	eq	4.7.3
textpattern	eq	4.6.0-beta
textpattern	eq	4.7.0-beta.2
textpattern	eq	4.8.0-beta.3
textpattern	eq	4.3.0
textpattern	eq	4.6.0
textpattern	eq	4.6.0-beta.3
textpattern	eq	4.5.1

Rows per page:

1-10 of 291

References

github.com/textpattern/textpattern/issues/1655