421 matches found
CVE-2021-28002
A persistent cross-site scripting vulnerability was discovered in the Excerpt parameter in Textpattern CMS 4.9.0 which allows remote attackers to execute arbitrary code via a crafted payload entered into the URL field. The vulnerability is triggered by users visiting the 'Articles' page...
Cross site scripting
A persistent cross-site scripting vulnerability was discovered in the Excerpt parameter in Textpattern CMS 4.9.0 which allows remote attackers to execute arbitrary code via a crafted payload entered into the URL field. The vulnerability is triggered by users visiting the 'Articles' page...
CVE-2021-28001
A cross-site scripting vulnerability was discovered in the Comments parameter in Textpattern CMS 4.8.4 which allows remote attackers to execute arbitrary code via a crafted payload entered into the URL field. The vulnerability is triggered by users visiting...
Cross site scripting
A cross-site scripting vulnerability was discovered in the Comments parameter in Textpattern CMS 4.8.4 which allows remote attackers to execute arbitrary code via a crafted payload entered into the URL field. The vulnerability is triggered by users visiting...
CVE-2021-28002
A persistent cross-site scripting vulnerability was discovered in the Excerpt parameter in Textpattern CMS 4.9.0 which allows remote attackers to execute arbitrary code via a crafted payload entered into the URL field. The vulnerability is triggered by users visiting the 'Articles' page...
CVE-2021-28002
CVE-2021-28002 affects Textpattern CMS (version around 4.9.0) where the Excerpt parameter is vulnerable to persistent cross-site scripting. The issue is triggered when users visit the Articles page and a crafted payload in the URL field can allow an attacker to execute arbitrary code in the conte...
CVE-2021-28001
A cross-site scripting vulnerability was discovered in the Comments parameter in Textpattern CMS 4.8.4 which allows remote attackers to execute arbitrary code via a crafted payload entered into the URL field. The vulnerability is triggered by users visiting...
CVE-2021-28001
Textpattern CMS 4.8.4 contains a reflected cross‑site scripting vulnerability in the Comments parameter, allowing arbitrary code execution via a crafted payload in the URL field (triggered by visiting https://site.com/articles/welcome-to-your-site#comments-head). The connected documents confirm t...
PT-2021-17708
Name of the Vulnerable Software and Affected Versions: Textpattern CMS version 4.9.0 Description: A persistent cross-site scripting issue was discovered in the Excerpt parameter of Textpattern CMS, allowing remote attackers to execute arbitrary code via a crafted payload entered into the URL fiel...
TextPattern Cms Cross-site Scripting Vulnerabilities
Textpattern Cms is a Php-based content management system from the Textpattern team. Textpattern CMS suffers from a cross-site scripting vulnerability that stems from a persistent cross-site scripting vulnerability found in the excerpt parameters of Textpattern CMS 4.9.0. An attacker could exploit...
PT-2021-17707
Name of the Vulnerable Software and Affected Versions: Textpattern CMS version 4.8.4 Description: A cross-site scripting issue was discovered in the Comments parameter, allowing remote attackers to execute arbitrary code via a crafted payload entered into the URL field. The issue is triggered by...
CVE-2021-28001: Improper Neutralization of Input During Web Page Generation
A cross-site scripting vulnerability was discovered in the Comments parameter in Textpattern CMS 4.8.4 which allows remote attackers to execute arbitrary code via a crafted payload entered into the URL field. The vulnerability is triggered by users visiting...
CVE-2021-28002: Improper Neutralization of Input During Web Page Generation
A persistent cross-site scripting vulnerability was discovered in the Excerpt parameter in Textpattern CMS 4.9.0 which allows remote attackers to execute arbitrary code via a crafted payload entered into the URL field. The vulnerability is triggered by users visiting the 'Articles' page...
Textpattern CMS cross-site scripting vulnerabilities
Textpattern Cms is a Php-based content management system from the Textpattern team. A security vulnerability in the Comments parameter in Textpattern CMS versions prior to 4.8.4 allows an attacker to execute arbitrary code via a specially crafted load entered in the URL field...
Textpattern CMS <= 4.8.8 CSRF Vulnerability
Textpattern CMS is prone to a cross-site request forgery CSRF vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...
Textpattern CMS < 4.8.2 XSS Vulnerability
Textpattern CMS is prone to a cross-site scripting XSS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
Textpattern Cross-Site Scripting Vulnerability
Textpattern is a free open-source content management system based on PHP and MySQL. version 4.8.1 of Textpattern contains a cross-site scripting vulnerability. An attacker can use this vulnerability to conduct cross-site scripting attacks via the "Custom" field in the "Menu Preferences" feature...
CVE-2020-23239
Cross Site Scripting XSS vulnerability in Textpattern CMS 4.8.1 via Custom fields in the Menu Preferences feature...
