An unrestricted file upload vulnerability in TextPattern CMS 4.8.7 enables remote code execution by authenticated users.

This vulnerability involves unrestricted file uploads (CWE-434), which can be leveraged by an authenticated user to upload malicious files that are subsequently executed by the server.

Exploitation of this flaw grants an attacker the ability to execute arbitrary code, which can lead to complete server compromise. Given the 8.8 CVSS score, this risk includes total loss of confidentiality, integrity, and availability for the affected web application.

Immediate Action: Update to the latest version of TextPattern CMS that addresses this file upload vulnerability. If an update is unavailable, restrict file upload permissions and validate file types rigorously at the application level.

Proactive Monitoring: Inspect web server logs for suspicious file upload activity or requests to non-media file types within upload directories.

Compensating Controls: Use a WAF to inspect incoming file uploads and block files with dangerous extensions or signatures.

Public Exploit Available: Yes — multiple entries exist on ExploitDB.

The combination of the high severity score and the availability of multiple public exploits necessitates immediate action. Administrators should upgrade to a secure version immediately and audit the file system for any unauthorized files that may have already been uploaded.