Design/Logic Flaw

2021-04-1514:15:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

JSON

Textpattern V4.8.4 contains an arbitrary file upload vulnerability where a plug-in can be loaded in the background without any security verification, which may lead to obtaining system permissions.

CPENameOperatorVersion
textpatterneq4.8.4

CPE	Name	Operator	Version
	textpattern	eq	4.8.4

References

github.com/textpattern/textpattern/issues/1655