There is an arbitrary file upload vulnerability in the background of textpattern cms v4.8.8, which leads to the loss of server permissions.
No PoCs from references.
- https://github.com/tanjiti/sec_profile