leekenghwa/CVE-2023-26852-Textpattern-v4.8.8-and-

leekenghwa/CVE-2023-26852-Textpattern-v4.8.8-and-

GitHubGitHub
GitHubgithub.com
Releases0
Textpattern v4.8.8 and Below are vulnerable to Unrestricted File Upload Leading to Remote Code Execution
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2023-26852↗
7.2 HIGH—

An arbitrary file upload vulnerability in the upload plugin of Textpattern v4.8.8 and below allows attackers to execute arbitrary code by uploading a crafted PHP file.