← Database

CVE-2023-24269

HIGH CVSS: 8.8 Published: 2023-04-28 Modified: 2026-06-17

Description

An arbitrary file upload vulnerability in the plugin upload function of Textpattern v4.8.8 allows attackers to execute arbitrary code via a crafted Zip file.

Affected Platforms

Textpattern Textpattern

Weakness Type

CWE-434, CWE-434

References