TextPattern CMS 4.8.8
Approved changes feed: RSS · Atom
cpe:2.3:a:textpattern:textpattern:4.8.8:-:*:*:*:*:*:*part: a version: 4.8.8 update: -
| Vendor | Textpattern (de93e3b6-a02f-5707-800f-5d434c6842dd) |
|---|---|
| Product | Textpattern (e06aa5b5-5b7a-5f8e-96a1-26dad25d9e4f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/textpattern/textpattern |
purl2cpe | 2026-06-01 10:11:50.114084 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-53911 |
vulnerable | 2026-06-08 06:19:39.995601 |
Textpattern CMS 4.8.8 Authenticated Stored Cross-Site Scripting via Article Excerpt
MEDIUM (5.4)
Textpattern CMS 4.8.8 contains a stored cross-site scripting vulnerability in the article excerpt field that allows authenticated users to inject malicious scripts. Attackers can insert JavaScript payloads into the excerpt, which will execute when the article is viewed by other users.
Published: 2025-12-17T22:44:47.932Z
Updated: 2026-07-28T01:47:39.612Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-50038 |
vulnerable | 2026-06-08 06:16:15.540199 |
Details available
There is an arbitrary file upload vulnerability in the background of textpattern cms v4.8.8, which leads to the loss of server permissions.
Published: 2023-12-28T00:00:00.000Z
Updated: 2024-11-26T14:48:45.476Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24269 |
vulnerable | 2026-06-08 05:56:05.280111 |
Details available
An arbitrary file upload vulnerability in the plugin upload function of Textpattern v4.8.8 allows attackers to execute arbitrary code via a crafted Zip file.
Published: 2023-04-28T00:00:00.000Z
Updated: 2025-01-30T20:27:10.058Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.