Textpattern 4.8.7 is affected by a HTML injection vulnerability through “Content>Write>Body”.
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Link | Tags |
---|---|
https://tanmay26.medium.com/textpattern-4-8-7-is-affected-by-html-injection-in-the-body-parameter-1a7be2441b70 | third party advisory exploit |