CVE-2021-40658

Textpattern 4.8.7 is affected by a HTML injection vulnerability through “ContentWriteBody”...

CVE-2021-40658

Textpattern 4.8.7 is affected by a HTML injection vulnerability through “ContentWriteBody”...

Design/Logic Flaw

Textpattern 4.8.7 is affected by a HTML injection vulnerability through “ContentWriteBody”...

CVE-2021-40658

Textpattern 4.8.7 is affected by a HTML injection vulnerability through “ContentWriteBody”...

CVE-2021-44082

textpattern 4.8.7 is vulnerable to Cross Site Scripting XSS via /textpattern/index.php,Body. A remote and unauthenticated attacker can use XSS to trigger remote code execution by uploading a webshell. To do so they must first steal the CSRF token before submitting a file upload request...

Cross site scripting

textpattern 4.8.7 is vulnerable to Cross Site Scripting XSS via /textpattern/index.php,Body. A remote and unauthenticated attacker can use XSS to trigger remote code execution by uploading a webshell. To do so they must first steal the CSRF token before submitting a file upload request...