Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xqcr-r97c-wq7p

Опубликовано: 18 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 5.1
CVSS3: 4.6

Описание

Textpattern CMS 4.8.8 contains a stored cross-site scripting vulnerability in the article excerpt field that allows authenticated users to inject malicious scripts. Attackers can insert JavaScript payloads into the excerpt, which will execute when the article is viewed by other users.

Textpattern CMS 4.8.8 contains a stored cross-site scripting vulnerability in the article excerpt field that allows authenticated users to inject malicious scripts. Attackers can insert JavaScript payloads into the excerpt, which will execute when the article is viewed by other users.

EPSS

Процентиль: 10%
0.00035
Низкий

5.1 Medium

CVSS4

4.6 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
4 месяца назад

Textpattern CMS 4.8.8 contains a stored cross-site scripting vulnerability in the article excerpt field that allows authenticated users to inject malicious scripts. Attackers can insert JavaScript payloads into the excerpt, which will execute when the article is viewed by other users.

CVSS3: 5.4
debian
4 месяца назад

Textpattern CMS 4.8.8 contains a stored cross-site scripting vulnerabi ...

EPSS

Процентиль: 10%
0.00035
Низкий

5.1 Medium

CVSS4

4.6 Medium

CVSS3

Дефекты

CWE-79