TextPattern CMS 4.8.7
Approved changes feed: RSS · Atom
cpe:2.3:a:textpattern:textpattern:4.8.7:*:*:*:*:*:*:*part: a version: 4.8.7 update: *
| Vendor | Textpattern (de93e3b6-a02f-5707-800f-5d434c6842dd) |
|---|---|
| Product | Textpattern (e06aa5b5-5b7a-5f8e-96a1-26dad25d9e4f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/textpattern/textpattern |
purl2cpe | 2026-06-01 10:11:50.114083 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-44082 |
vulnerable | 2026-06-08 05:36:44.922051 |
Details available
textpattern 4.8.7 is vulnerable to Cross Site Scripting (XSS) via /textpattern/index.php,Body. A remote and unauthenticated attacker can use XSS to trigger remote code execution by uploading a webshell. To do so they must first steal the CSRF token before submitting a file upload request.
Published: 2022-03-29T22:50:40.000Z
Updated: 2024-08-04T04:10:17.286Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-40658 |
vulnerable | 2026-06-08 05:35:18.865875 |
Details available
Textpattern 4.8.7 is affected by a HTML injection vulnerability through “Content>Write>Body”.
Published: 2022-06-14T10:53:12.000Z
Updated: 2024-08-04T02:51:06.384Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.