Textpattern versions prior to 4.8.3 contain an authenticated remote code execution vulnerability that allows logged-in users to upload malicious PHP files. Atta…

Textpattern versions prior to 4.8.3 contain an authenticated remote code execution vulnerability. The flaw allows logged-in users to upload malicious PHP files containing shell command execution payloads. Attackers can execute arbitrary commands by accessing the uploaded file through a specific URL parameter. This vulnerability enables authenticated users to gain complete system control through file upload abuse. The issue affects all Textpattern installations running versions below 4.8.3.