CVE-2023-24269

Textpattern CMS v4.8.8 is affected by an arbitrary file upload vulnerability in the plugin upload function that enables remote code execution via a crafted Zip file. Root cause: insufficient validation of uploaded archives in the plugin upload workflow. CVE-2023-24269 is associated with this issu...