Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xqcr-r97c-wq7p

Опубликовано: 18 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 5.1
CVSS3: 4.6

Описание

Textpattern CMS 4.8.8 contains a stored cross-site scripting vulnerability in the article excerpt field that allows authenticated users to inject malicious scripts. Attackers can insert JavaScript payloads into the excerpt, which will execute when the article is viewed by other users.

Textpattern CMS 4.8.8 contains a stored cross-site scripting vulnerability in the article excerpt field that allows authenticated users to inject malicious scripts. Attackers can insert JavaScript payloads into the excerpt, which will execute when the article is viewed by other users.

EPSS

Процентиль: 19%
0.00271
Низкий

5.1 Medium

CVSS4

4.6 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
8 месяцев назад

Textpattern CMS 4.8.8 contains a stored cross-site scripting vulnerability in the article excerpt field that allows authenticated users to inject malicious scripts. Attackers can insert JavaScript payloads into the excerpt, which will execute when the article is viewed by other users.

CVSS3: 5.4
debian
8 месяцев назад

Textpattern CMS 4.8.8 contains a stored cross-site scripting vulnerabi ...

EPSS

Процентиль: 19%
0.00271
Низкий

5.1 Medium

CVSS4

4.6 Medium

CVSS3

Дефекты

CWE-79