{"id":"CVE-2020-35854","title":"Textpattern 4.8.4 is affected by cross-site scripting (XSS) in the Body parameter.","summary":"Textpattern 4.8.4 is affected by cross-site scripting (XSS) in the Body parameter.","severity":"medium","cvss":4.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","cwe":["CWE-79"],"vendor":"textpattern","product":"textpattern","affected":["textpattern = 4.8.4"],"published":"2021-01-26","updated":"2026-07-05","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2020-35854","references":[{"url":"https://riteshgohil-25.medium.com/textpattern-4-8-4-is-affected-by-cross-site-scripting-xss-in-the-body-parameter-b9a3d7da2a88","label":"cve@mitre.org"},{"url":"https://www.textpattern.co/demo","label":"cve@mitre.org"},{"url":"http://textpattern.com","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://riteshgohil-25.medium.com/textpattern-4-8-4-is-affected-by-cross-site-scripting-xss-in-the-body-parameter-b9a3d7da2a88","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.textpattern.co/demo","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd"],"epss":0.00571,"epssPercentile":0.45957,"ingestedAt":"2026-07-05T02:00:01.363Z","slug":"CVE-2020-35854","body":"## Overview\n\nTextpattern 4.8.4 is affected by cross-site scripting (XSS) in the Body parameter.\n\n## Affected\n\n- `textpattern = 4.8.4`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":27,"depthScoreParts":{"impact":26.4,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}