CVE-2020-35854

MediumCVSS 4.8

Published: 26/01/2021(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.57%

43th percentile - higher than 43% of all known CVEs

Summary

Textpattern 4.8.4 is affected by cross-site scripting (XSS) in the Body parameter, allowing an attacker to inject malicious scripts. This can lead to session theft or user redirection.

Risk Assessment

The risk involves potential compromise of admin or user accounts through script execution in the victim's browser.

Recommendation

Immediately update Textpattern to version 4.8.5 or later, which includes a fix for the XSS vulnerability.

Original NVD description (English source)

Textpattern 4.8.4 is affected by cross-site scripting (XSS) in the Body parameter.