Description
Textpattern CMS version 4.9.0 contains a second-order cross-site scripting vulnerability that allows attackers to inject malicious scripts by exploiting improper sanitization of user-supplied input in Atom feed XML elements. Attackers can embed unescaped payloads in parameters such as category that are reflected into Atom fields like and , which execute as JavaScript when feed readers or CMS aggregators consume the feed and insert content into the DOM using unsafe methods.
Problem types
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-116 Improper Encoding or Escaping of Output
Product status
4.9.0
Credits
indoushka
References
packetstorm.news/files/id/216241/ (Packet Storm listing (Textpattern 4.9.0 Second-Order XSS via Atom Feed Injection))
textpattern.com/ (Vendor site)