CVE-2021-28002: Improper Neutralization of Input During Web Page Generation

A persistent cross-site scripting vulnerability was discovered in the Excerpt parameter in Textpattern CMS 4.9.0 which allows remote attackers to execute arbitrary code via a crafted payload entered into the URL field. The vulnerability is triggered by users visiting the 'Articles' page...

PT-2021-17707

Name of the Vulnerable Software and Affected Versions: Textpattern CMS version 4.8.4 Description: A cross-site scripting issue was discovered in the Comments parameter, allowing remote attackers to execute arbitrary code via a crafted payload entered into the URL field. The issue is triggered by...

CVE-2021-28001: Improper Neutralization of Input During Web Page Generation

A cross-site scripting vulnerability was discovered in the Comments parameter in Textpattern CMS 4.8.4 which allows remote attackers to execute arbitrary code via a crafted payload entered into the URL field. The vulnerability is triggered by users visiting...

Textpattern CMS <= 4.8.8 CSRF Vulnerability

Textpattern CMS is prone to a cross-site request forgery CSRF vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

CVE-2020-23239

Cross Site Scripting XSS vulnerability in Textpattern CMS 4.8.1 via Custom fields in the Menu Preferences feature...

CVE-2020-23239

Cross Site Scripting XSS vulnerability in Textpattern CMS 4.8.1 via Custom fields in the Menu Preferences feature...

Cross site scripting

Cross Site Scripting XSS vulnerability in Textpattern CMS 4.8.1 via Custom fields in the Menu Preferences feature...

CVE-2020-23239

Cross Site Scripting XSS vulnerability in Textpattern CMS 4.8.1 via Custom fields in the Menu Preferences feature...

CVE-2020-23239

CVE-2020-23239 affects Textpattern CMS 4.8.1, with a cross-site scripting (XSS) flaw in the Menu Preferences Custom field. The vulnerability is described as enabling XSS via the Custom field in Menu Preferences. A related open-source/vuln source notes a vulnerability class for Textpattern CMS

CVE-2020-23239

Cross Site Scripting XSS vulnerability in Textpattern CMS 4.8.1 via Custom fields in the Menu Preferences feature...

CVE-2020-23239: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Textpattern CMS 4.8.1 via Custom fields in the Menu Preferences feature...

PT-2021-10864

Name of the Vulnerable Software and Affected Versions Textpattern CMS version 4.8.1 Description The issue is a Cross Site Scripting XSS vulnerability. It occurs via Custom fields in the Menu Preferences feature. Recommendations For Textpattern CMS version 4.8.1, update to a version that fixes thi...

Textpattern CMS suffers from a file upload vulnerability (CNVD-2021-51401)

Textpattern CMS is a free open source content management system based on PHP and MySQL. A file upload vulnerability exists in Textpattern CMS version 4.8.7, which can be exploited by an attacker to gain control of the server...

Textpattern CMS Detection (HTTP)

HTTP based detection of Textpattern CMS. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.146229";...

TextPattern CMS 4.9.0-dev - Remote Command Execution (Authenticated) Exploit

Exploit Title: TextPattern CMS 4.9.0-dev - Remote Command Execution RCE Authenticated Exploit Author: Mevlüt Akçam Software Link: https://github.com/textpattern/textpattern Vendor Homepage: https://textpattern.com/ Version: 4.9.0-dev Tested on: 20.04.1-Ubuntu !/usr/bin/python3 import requests fro...

TextPattern CMS 4.9.0-dev - Remote Command Execution (RCE) (Authenticated)

Exploit Title: TextPattern CMS 4.9.0-dev - Remote Command Execution RCE Authenticated Date: 07/04/2021 Exploit Author: Mevlüt Akçam Software Link: https://github.com/textpattern/textpattern Vendor Homepage: https://textpattern.com/ Version: 4.9.0-dev Tested on: 20.04.1-Ubuntu !/usr/bin/python3...

TextPattern CMS 4.9.0-dev Remote Command Execution

Exploit Title: TextPattern CMS 4.9.0-dev - Remote Command Execution RCE Authenticated Date: 07/04/2021 Exploit Author: Mevlüt Akçam Software Link: https://github.com/textpattern/textpattern Vendor Homepage: https://textpattern.com/ Version: 4.9.0-dev Tested on: 20.04.1-Ubuntu !/usr/bin/python3...

File Upload Vulnerability in Textpattern CMS

Textpattern CMS is a free open source content management system based on PHP and MySQL. Textpattern CMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the server...

TextPattern CMS 4.8.7 - Remote Command Execution (Authenticated) Vulnerability

Exploit Title : TextPattern CMS 4.8.7 - Remote Command Execution Authenticated Exploit Author : Mert Daş email protected Software Link : https://textpattern.com/filedownload/113/textpattern-4.8.7.zip Software web : https://textpattern.com/ Tested on: Server : Xampp First of all we should use file...

TextPattern CMS 4.8.7 Remote Command Execution

Exploit Title : TextPattern CMS 4.8.7 - Remote Command Execution Authenticated Date : 2021/09/06 Exploit Author : Mert Daş [email protected] Software Link : https://textpattern.com/filedownload/113/textpattern-4.8.7.zip Software web : https://textpattern.com/ Tested on: Server : Xampp First ...