CVE-2014-4737

Cross-site scripting (XSS) vulnerability in Textpattern CMS before 4.5.7 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to setup/index.php.

• CWE-79

• http://packetstormsecurity.com/files/128519/Textpattern-4.5.5-Cross-Site-Scripting.htmlExploit
• http://textpattern.com/weblog/379/textpattern-cms-457-released-ten-years-onExploit, Patch, Vendor Advisory
• http://www.securityfocus.com/archive/1/533596/100/0/threaded
• https://exchange.xforce.ibmcloud.com/vulnerabilities/96802
• https://www.htbridge.com/advisory/HTB23223Exploit
• http://packetstormsecurity.com/files/128519/Textpattern-4.5.5-Cross-Site-Scripting.htmlExploit
• http://textpattern.com/weblog/379/textpattern-cms-457-released-ten-years-onExploit, Patch, Vendor Advisory
• http://www.securityfocus.com/archive/1/533596/100/0/threaded
• https://exchange.xforce.ibmcloud.com/vulnerabilities/96802
• https://www.htbridge.com/advisory/HTB23223Exploit

Published

Oct 10, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-4726Unspecified vulnerability in the MailPoet Newsletters (wysij…
• CVE-2014-4727Cross-site scripting (XSS) vulnerability in the DHCP clients…
• CVE-2014-4728The web server in the TP-LINK N750 Wireless Dual Band Gigabi…
• CVE-2014-4734Cross-site scripting (XSS) vulnerability in e107_admin/db.ph…
• CVE-2014-4735Cross-site scripting (XSS) vulnerability in MyWebSQL 3.4 and…
• CVE-2014-4736SQL injection vulnerability in E2 before 2.4 (2845) allows r…
• CVE-2014-4738Multiple cross-site scripting (XSS) vulnerabilities in Forti…
• CVE-2014-4740Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2014-4741SQL injection vulnerability in demo/ads.php in Artifectx xCl…
• CVE-2014-4742Cross-site scripting (XSS) vulnerability in system/class_lin…
• CVE-2014-4743Multiple cross-site scripting (XSS) vulnerabilities in (1) s…
• CVE-2014-4744Multiple cross-site scripting (XSS) vulnerabilities in osTic…