CVE-2018-1000090

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2018-03-13 · updated 2026-06-17
Weakness: CWE-611

Description

textpattern version version 4.6.2 contains a XML Injection vulnerability in Import XML feature that can result in Denial of service in context to the web server by exhausting server memory resources. This attack appear to be exploitable via Uploading a specially crafted XML file.

Affected products

TextPattern CMS: 4.6.2

References

https://github.com/textpattern/textpattern/issues/1141
https://github.com/textpattern/textpattern/issues/1141

Get alerted when CVE-2018-1000090 or the next vulnerability affects your stack