Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xqcr-r97c-wq7p

Опубликовано: 18 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 5.1
CVSS3: 4.6

Описание

Textpattern CMS 4.8.8 contains a stored cross-site scripting vulnerability in the article excerpt field that allows authenticated users to inject malicious scripts. Attackers can insert JavaScript payloads into the excerpt, which will execute when the article is viewed by other users.

Textpattern CMS 4.8.8 contains a stored cross-site scripting vulnerability in the article excerpt field that allows authenticated users to inject malicious scripts. Attackers can insert JavaScript payloads into the excerpt, which will execute when the article is viewed by other users.

EPSS

Процентиль: 8%
0.0003
Низкий

5.1 Medium

CVSS4

4.6 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
около 2 месяцев назад

Textpattern CMS 4.8.8 contains a stored cross-site scripting vulnerability in the article excerpt field that allows authenticated users to inject malicious scripts. Attackers can insert JavaScript payloads into the excerpt, which will execute when the article is viewed by other users.

CVSS3: 5.4
debian
около 2 месяцев назад

Textpattern CMS 4.8.8 contains a stored cross-site scripting vulnerabi ...

EPSS

Процентиль: 8%
0.0003
Низкий

5.1 Medium

CVSS4

4.6 Medium

CVSS3

Дефекты

CWE-79