Skip to content

Product

Textpattern CMS vulnerabilities

1 published CVE affecting Textpattern CMS, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest Textpattern CMS CVEs

Newest publication first

  1. CVE-2026-32986 Textpattern CMS 4.9.0: Second-Order XSS via Atom Feed Injection

    Published
    MediumCVSS 5.1

    Textpattern CMS version 4.9.0 contains a second-order cross-site scripting vulnerability that allows attackers to inject malicious scripts by exploiting improper sanitization of user-supplied input in Atom feed XML elements. Attackers can embed unescaped payloads in parameters su...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.