security vulnerability 1 post

A new version of Textpattern CMS has been released. Version 4.4.1 takes care of a security vulnerability that was present in previous versions so upgrading is highly recommended. From the announcement: All versions prior to TXP 4.4.1 were open to CSRF attacks; pronounced sea-surf. While it’s out of scope in this article to discuss what makes up such an attack, it generally works by tricking a logged-in user into clicking something (e.g. an <img> tag which isn’t an actual image)… Read More →