CVE-2021-45806

2022-01-1314:15:07

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.6%

JSON

jpress v4.2.0 admin panel provides a function through which attackers can modify the template and inject some malicious code.

CPENameOperatorVersion
jpresseq2.0-rc.8
jpresseq1.0.1
jpresseq4.0.2
jpresseq3.2.5
jpresseq4.0.6
jpresseq1.0.4
jpresseq2.0-rc.4
jpresseq2.0-rc.1
jpresseq0.0.2
jpresseq1.0

Name	Operator	Version
jpress	eq	2.0-rc.8
jpress	eq	1.0.1
jpress	eq	4.0.2
jpress	eq	3.2.5
jpress	eq	4.0.6
jpress	eq	1.0.4
jpress	eq	2.0-rc.4
jpress	eq	2.0-rc.1
jpress	eq	0.0.2
jpress	eq	1.0

Rows per page:

1-10 of 911

References

jpress.com

github.com/JPressProjects/jpress

github.com/JPressProjects/jpress/issues/166