CVE-2020-23239

2021-07-2620:15:08

Google

osv.dev

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.8%

JSON

Cross Site Scripting (XSS) vulnerability in Textpattern CMS 4.8.1 via Custom fields in the Menu Preferences feature.

CPENameOperatorVersion
textpatterneq4.6.2
textpatterneq4.7.0-beta
textpatterneq4.7.3
textpatterneq4.6.0-beta
textpatterneq4.7.0-beta.2
textpatterneq4.8.0-beta.3
textpatterneq4.3.0
textpatterneq4.6.0
textpatterneq4.6.0-beta.3
textpatterneq4.5.1

Name	Operator	Version
textpattern	eq	4.6.2
textpattern	eq	4.7.0-beta
textpattern	eq	4.7.3
textpattern	eq	4.6.0-beta
textpattern	eq	4.7.0-beta.2
textpattern	eq	4.8.0-beta.3
textpattern	eq	4.3.0
textpattern	eq	4.6.0
textpattern	eq	4.6.0-beta.3
textpattern	eq	4.5.1