CVE-2021-45807

jpress v4.2.0 is vulnerable to command execution via io.jpress.web.admin.AddonController::doUploadAndInstall...

Command injection

jpress v4.2.0 is vulnerable to command execution via io.jpress.web.admin.AddonController::doUploadAndInstall...

CVE-2021-45807

jpress v4.2.0 is vulnerable to command execution via io.jpress.web.admin.AddonController::doUploadAndInstall...

CVE-2021-45807

CVE-2021-45807 affects jpress v4.2.0. The vulnerability arises from the server-side function io.jpress.web.admin.AddonController::doUploadAndInstall, enabling potential command execution. Connected PT-Security data specifies the issue affects jpress 4.2.0 and currently provides no known fix/versi...

CVE-2021-45806

jpress v4.2.0 admin panel provides a function through which attackers can modify the template and inject some malicious code...

CVE-2021-45806

jpress v4.2.0 admin panel provides a function through which attackers can modify the template and inject some malicious code...

Code injection

jpress v4.2.0 admin panel provides a function through which attackers can modify the template and inject some malicious code...

CVE-2021-45806

CVE-2021-45806 affects jpress v4.2.0: the admin panel exposes a function that allows attackers to modify templates and inject malicious code. The reported impact is malicious code injection via template modification, but the provided documents do not specify the exact root cause, vulnerable compo...

CVE-2021-45806

jpress v4.2.0 admin panel provides a function through which attackers can modify the template and inject some malicious code...

PT-2022-12415 · Jpress · Jpress

Name of the Vulnerable Software and Affected Versions: jpress version 4.2.0 Description: The issue allows for command execution via the io.jpress.web.admin. AddonController::doUploadAndInstall function. Recommendations: For jpress version 4.2.0, at the moment, there is no information about a newe...

Jpress 命令注入漏洞

Jpress is a set of blogging platforms developed by the Jpress team using the Java language. an access control error vulnerability exists in Jpress, which stems from the product allowing the io.jpress.web.admin.AddonController::doUploadAndInstall function to execute commands. No detailed...

Jpress 代码注入漏洞

Jpress is a set of blogging platform developed by the Jpress team using the Java language. jpress has a security vulnerability that can be exploited by attackers to inject some malicious code through functional modifications to the template...

CVE-2021-33347

An issue was discovered in JPress v3.3.0 and below. There are XSS vulnerabilities in the template module and tag management module. If you log in to the background by means of weak password, the storage XSS vulnerability can occur...

CVE-2021-33347

An issue was discovered in JPress v3.3.0 and below. There are XSS vulnerabilities in the template module and tag management module. If you log in to the background by means of weak password, the storage XSS vulnerability can occur...

Cross site scripting

An issue was discovered in JPress v3.3.0 and below. There are XSS vulnerabilities in the template module and tag management module. If you log in to the background by means of weak password, the storage XSS vulnerability can occur...

CVE-2021-33347

CVE-2021-33347 affects JPress v3.3.0 and earlier. The issue is stored XSS originating from the template module and the tag management module, exploitable when a background login occurs via weak passwords. Impact is described as storage XSS with potential credential-related login context enabling ...

CVE-2021-33347

An issue was discovered in JPress v3.3.0 and below. There are XSS vulnerabilities in the template module and tag management module. If you log in to the background by means of weak password, the storage XSS vulnerability can occur...

JPress 跨站脚本漏洞

Jpress is a set of blogging platform developed in Java language by Jpress team. A cross-site scripting vulnerability exists in JPress v3.3.0 and below, which originates from the template module and tag management module...

JPress has a command execution vulnerability

JPress is a product developed using Java, similar to WordPress. JPress suffers from a command execution vulnerability that can be exploited by an attacker to execute arbitrary code...

JPress suffers from an XML entity injection vulnerability (CNVD-2021-30396)

JPress is a product developed using Java, similar to WordPress. JPress has an XML entity injection vulnerability that can be exploited by an attacker to read server files...