| Package | Affected versions | Patched versions |
|---|---|---|
| textpattern | = 4.8.7 |
textpattern 4.8.7 is vulnerable to Cross Site Scripting (XSS) via /textpattern/index.php,Body. A remote and unauthenticated attacker can use XSS to trigger remote code execution by uploading a webshell. To do so they must first steal the CSRF token before submitting a file upload request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free