Unrated severityNVD Advisory· Published Aug 7, 2023· Updated Oct 11, 2024

CVE-2023-36220

Description

Directory Traversal vulnerability in Textpattern CMS v4.8.8 allows a remote authenticated attacker to execute arbitrary code and gain access to sensitive information via the plugin Upload function.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Textpattern/CMSdescription
Textpattern/Textpatternllm-fuzzy
Range: =4.8.8

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/172967/Textpattern-CMS-4.8.8-Command-Injection.htmlmitre
release-demo.textpattern.comitre
textpattern.commitre
textpattern.com/file_download/118/textpattern-4.8.8.zipmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000