Approved changes feed: RSS · Atom

cpe:2.3:a:textpattern:textpattern:4.8.7:-:*:*:*:*:*:*

part: a version: 4.8.7 update: -

VendorTextpattern (de93e3b6-a02f-5707-800f-5d434c6842dd)
ProductTextpattern (e06aa5b5-5b7a-5f8e-96a1-26dad25d9e4f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-47943 vulnerable 2026-06-08 05:38:07.949784 TextPattern CMS 4.8.7 Remote Code Execution via File Upload
HIGH (8.8)
TextPattern CMS 4.8.7 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands by uploading malicious PHP files through the file upload functionality. Attackers can upload a PHP shell via the Files section in the content area and execute commands by accessing the uploaded file at /textpattern/files/ with GET parameters passed to the system function.
Published: 2026-05-10T12:43:59.549Z
Updated: 2026-05-11T15:17:45.607Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.