Lucene search
+L

172 matches found

Cvelist
Cvelist
•added 2026/03/20 3:42 p.m.•41 views

CVE-2026-32986 Textpattern CMS 4.9.0: Second-Order XSS via Atom Feed Injection

Textpattern CMS version 4.9.0 contains a second-order cross-site scripting vulnerability that allows attackers to inject malicious scripts by exploiting improper sanitization of user-supplied input in Atom feed XML elements. Attackers can embed unescaped payloads in parameters such as category th...

6.1CVSS0.0026EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/03/20 12:00 a.m.•23 views

PT-2026-26626

Textpattern CMS version 4.9.0 contains a second-order cross-site scripting vulnerability that allows attackers to inject malicious scripts by exploiting improper sanitization of user-supplied input in Atom feed XML elements. Attackers can embed unescaped payloads in parameters such as category th...

6.1CVSS5.7AI score0.0026EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/20 12:00 a.m.•2 views

CVE-2026-32986: Improper Neutralization of Input During Web Page Generation

Textpattern CMS version 4.9.0 contains a second-order cross-site scripting vulnerability that allows attackers to inject malicious scripts by exploiting improper sanitization of user-supplied input in Atom feed XML elements. Attackers can embed unescaped payloads in parameters such as category th...

6.1CVSS5.8AI score0.0026EPSS
SaveExploits1References1
Packet Storm
Packet Storm
•added 2026/02/26 12:00 a.m.•160 views

📄 Textpattern 4.9.0 Cross Site Scripting

Textpattern version 4.9.0 suffers from a cross site scripting vulnerability. ============================================================================================================================================= | Title : Textpattern 4.9.0 Second-Order XSS via Atom Feed Injection | | Autho...

5AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/01/09 11:25 a.m.•14 views

CVE-2021-28002

A persistent cross-site scripting vulnerability was discovered in the Excerpt parameter in Textpattern CMS 4.9.0 which allows remote attackers to execute arbitrary code via a crafted payload entered into the URL field. The vulnerability is triggered by users visiting the 'Articles' page...

5.4CVSS7.1AI score0.01073EPSS
SaveExploits1References1
NVD
NVD
•added 2025/12/17 11:15 p.m.•11 views

CVE-2023-53911

Textpattern CMS 4.8.8 contains a stored cross-site scripting vulnerability in the article excerpt field that allows authenticated users to inject malicious scripts. Attackers can insert JavaScript payloads into the excerpt, which will execute when the article is viewed by other users...

5.4CVSS0.00311EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2025/12/17 10:44 p.m.•35 views

CVE-2023-53911 Textpattern CMS 4.8.8 Authenticated Stored Cross-Site Scripting via Article Excerpt

Textpattern CMS 4.8.8 contains a stored cross-site scripting vulnerability in the article excerpt field that allows authenticated users to inject malicious scripts. Attackers can insert JavaScript payloads into the excerpt, which will execute when the article is viewed by other users...

5.4CVSS0.00311EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2025/12/17 10:44 p.m.•5 views

CVE-2023-53911 Textpattern CMS 4.8.8 Authenticated Stored Cross-Site Scripting via Article Excerpt

Textpattern CMS 4.8.8 contains a stored cross-site scripting vulnerability in the article excerpt field that allows authenticated users to inject malicious scripts. Attackers can insert JavaScript payloads into the excerpt, which will execute when the article is viewed by other users...

5.4CVSS5.7AI score0.00311EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2025/12/17 12:00 a.m.•11 views

Textpattern CMS 跨站脚本漏洞

Textpattern CMS is a Php-based content management system from the Textpattern team. A cross-site scripting vulnerability exists in Textpattern CMS version 4.8.8, which stems from improperly cleaned article summary fields and could lead to a stored cross-site scripting attack...

5.4CVSS5.9AI score0.00311EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/17 12:00 a.m.•1 views

CVE-2023-53911: Improper Neutralization of Input During Web Page Generation

Textpattern CMS 4.8.8 contains a stored cross-site scripting vulnerability in the article excerpt field that allows authenticated users to inject malicious scripts. Attackers can insert JavaScript payloads into the excerpt, which will execute when the article is viewed by other users...

5.4CVSS5.8AI score0.00311EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2021-14720

Malware in sbrugna...

5.4CVSS5.6AI score0.01073EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•10 views

EUVD-2010-3204

Malware in sbrugna...

7.5CVSS6.4AI score0.02869EPSS
SaveExploits2References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•10 views

EUVD-2014-4656

Malware in sbrugna...

4.3CVSS6.1AI score0.01925EPSS
SaveExploits3References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2008-5639

Malware in sbrugna...

4.3CVSS6.4AI score0.01144EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2011-4924

Malware in sbrugna...

4.3CVSS6.4AI score0.01464EPSS
SaveExploits3References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2020-21828

Malware in sbrugna...

8.8CVSS8.6AI score0.00658EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2020-15991

Malware in sbrugna...

4.8CVSS5.1AI score0.0051EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•10 views

EUVD-2021-14719

Malware in sbrugna...

5.4CVSS5.6AI score0.01019EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2021-27816

Malicious code in bioql PyPI...

4.3CVSS4.9AI score0.00523EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2023-40197

Malicious code in bioql PyPI...

7.2CVSS7.1AI score0.03392EPSS
SaveExploits1References4
Rows per page
Query Builder