Medium severity5.4NVD Advisory· Published Aug 19, 2021· Updated Jun 17, 2026
CVE-2021-28002
CVE-2021-28002
Description
A persistent cross-site scripting vulnerability was discovered in the Excerpt parameter in Textpattern CMS 4.9.0 which allows remote attackers to execute arbitrary code via a crafted payload entered into the URL field. The vulnerability is triggered by users visiting the 'Articles' page.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:textpattern:textpattern:4.9.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:textpattern:textpattern:4.9.0:*:*:*:*:*:*:*
- (no CPE)range: =4.9.0
- Textpattern/CMSdescription
Patches
Vulnerability mechanics
References
2- www.exploit-db.com/exploits/49617nvdExploitThird Party AdvisoryVDB Entry
- www.linkedin.com/in/tushar-vaidya-2111s5/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.