CVE-2023-36220

Description

References

• packetstormsecurity.com/files/172967/Textpattern-CMS-4.8.8-Command-Injection.html · Exploit
• release-demo.textpattern.co · Product
• textpattern.com · Product
• textpattern.com/file_download/118/textpattern-4.8.8.zip · Release Notes

More vulnerabilities in textpattern

• CVE-2026-30452MEDIUM 6.5Textpattern CMS 4.9.0 contains a Broken Access Control vulnerability in the article management system that allows authenticated users with l…
• CVE-2026-32986MEDIUM 6.1Textpattern CMS version 4.9.0 contains a second-order cross-site scripting vulnerability that allows attackers to inject malicious scripts b…
• CVE-2023-53911MEDIUM 5.4Textpattern CMS 4.8.8 contains a stored cross-site scripting vulnerability in the article excerpt field that allows authenticated users to i…
• CVE-2023-50038HIGH 8.8There is an arbitrary file upload vulnerability in the background of textpattern cms v4.8.8, which leads to the loss of server permissions.
• CVE-2023-24269HIGH 8.8An arbitrary file upload vulnerability in the plugin upload function of Textpattern v4.8.8 allows attackers to execute arbitrary code via a …