CVE-2020-19510

2021-06-2119:15:07

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.5%

JSON

Textpattern 4.7.3 contains an aribtrary file load via the file_insert function in include/txp_file.php.

CPENameOperatorVersion
textpatterneq4.6.2
textpatterneq4.7.0-beta
textpatterneq4.7.3
textpatterneq4.6.0-beta
textpatterneq4.7.0-beta.2
textpatterneq4.3.0
textpatterneq4.6.0
textpatterneq4.6.0-beta.3
textpatterneq4.5.1
textpatterneq4.7.0-beta.3

Name	Operator	Version
textpattern	eq	4.6.2
textpattern	eq	4.7.0-beta
textpattern	eq	4.7.3
textpattern	eq	4.6.0-beta
textpattern	eq	4.7.0-beta.2
textpattern	eq	4.3.0
textpattern	eq	4.6.0
textpattern	eq	4.6.0-beta.3
textpattern	eq	4.5.1
textpattern	eq	4.7.0-beta.3