CVE-2023-53911
MEDIUMTextpattern CMS 4.8.8 - Authenticated Stored Cross-Site Scripting in Article Excerpt Field
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2023-53911. PoCs published by tmrswrr.
AI-analyzed exploit summary This exploit demonstrates a stored XSS vulnerability in Textpattern CMS v4.8.8 by injecting a malicious script into the 'Excerpt' field of an article, which executes when the article is viewed. The payload is delivered via a multipart/form-data POST request to the admin interface.
Description
Textpattern CMS 4.8.8 contains a stored cross-site scripting vulnerability in the article excerpt field that allows authenticated users to inject malicious scripts. Attackers can insert JavaScript payloads into the excerpt, which will execute when the article is viewed by other users.
Exploits (1)
This exploit demonstrates a stored XSS vulnerability in Textpattern CMS v4.8.8 by injecting a malicious script into the 'Excerpt' field of an article, which executes when the article is viewed. The payload is delivered via a multipart/form-data POST request to the admin interface.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N