CVE-2021-28002 in Textpattern

Tóm tắt

Bởi MITRE • 19/08/2021

A persistent cross-site scripting vulnerability was discovered in the Excerpt parameter in Textpattern CMS 4.9.0 which allows remote attackers to execute arbitrary code via a crafted payload entered into the URL field. The vulnerability is triggered by users visiting the 'Articles' page.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Đặt trước: 05/03/2021
• Tiết lộ: 19/08/2021
• Kiểm duyệt: được chấp nhận
• mục: VDB-181186
• CPE: sẵn sàng
• CWE: CWE-79 (Đã xác nhận)
• Khai thác: Tải xuống
• CVSS: 3.5 (VulDB)
• EPSS: 0.01073
• KEV: không
• Các hoạt động: rất thấp
• ngành: Lawfirm, Hostingprovider, ...

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2021-28002
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-28002
• CVE Details: https://www.cvedetails.com/cve/CVE-2021-28002/