PT-2022-11978

Name of the Vulnerable Software and Affected Versions textpattern version 4.8.7 Description The issue allows a remote and unauthenticated attacker to trigger remote code execution by uploading a webshell via Cross Site Scripting XSS in the "/textpattern/index.php" endpoint, specifically in the Bo...

CVE-2021-44082: Improper Neutralization of Input During Web Page Generation

textpattern 4.8.7 is vulnerable to Cross Site Scripting XSS via /textpattern/index.php,Body. A remote and unauthenticated attacker can use XSS to trigger remote code execution by uploading a webshell. To do so they must first steal the CSRF token before submitting a file upload request...