Beveiligingsadvies

CVE-2021-47976

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-16 15:26:16

Laatst bijgewerkt 2026-05-18 16:50:14

Toegewezen door VulnCheck

CVSS-score 8.8

Status PUBLISHED

Beschrijving

TextPattern CMS 4.9.0-dev contains a remote code execution vulnerability that allows authenticated attackers to upload arbitrary PHP files by exploiting the plugin upload functionality. Attackers can authenticate, retrieve a CSRF token from the plugin event page, and upload malicious PHP files to the textpattern/tmp/ directory for code execution.

← Alle CVE's bekijken Bekijk op cve.org ↗