CVE-2023-53911
Textpattern CMS 4.8.8 Authenticated Stored Cross-Site Scripting via Article Excerpt
概要
Textpattern CMS 4.8.8 Authenticated Stored Cross-Site Scripting via Article Excerpt
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Textpattern CMS 4.8.8 contains a stored cross-site scripting vulnerability in the article excerpt field that allows authenticated users to inject malicious scripts. Attackers can insert JavaScript payloads into the excerpt, which will execute when the article is viewed by other users.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory vulncheck.com
- report exploit-db.com
- web textpattern.com