Cross-Site Scripting Vulnerability in Textpattern CMS by Textpattern
CVE-2014-4737

Currently unrated

Key Information:

Vendor: Textpattern
Status: Textpattern
Vendor: CVE Published:; 10 October 2014

🔔 Create Textpattern Vulnerability Alert

What is CVE-2014-4737?

A cross-site scripting (XSS) vulnerability exists in Textpattern CMS prior to version 4.5.7. This flaw allows remote attackers to craft malicious web scripts or HTML that can be injected via the PATH_INFO parameter in the setup/index.php file. If exploited, this vulnerability can compromise the security of the CMS, potentially allowing an attacker to execute unauthorized actions or access sensitive information. Users are encouraged to update to the latest version of Textpattern CMS to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch