JPress 跨站脚本漏洞

Jpress is a set of blogging platform developed in Java language by Jpress team. A cross-site scripting vulnerability exists in JPress v3.3.0 and below, which originates from the template module and tag management module...

CVE-2021-33347: Improper Neutralization of Input During Web Page Generation

An issue was discovered in JPress v3.3.0 and below. There are XSS vulnerabilities in the template module and tag management module. If you log in to the background by means of weak password, the storage XSS vulnerability can occur...

JPress has a command execution vulnerability

JPress is a product developed using Java, similar to WordPress. JPress suffers from a command execution vulnerability that can be exploited by an attacker to execute arbitrary code...

JPress suffers from an XML entity injection vulnerability (CNVD-2021-30396)

JPress is a product developed using Java, similar to WordPress. JPress has an XML entity injection vulnerability that can be exploited by an attacker to read server files...

XSS Vulnerability in JPress v3.3.0

JPress is a WordPress-like product developed in Java. JPress v3.3.0 suffers from an XSS vulnerability that can be exploited by attackers to obtain user cookie information...

JPress suffers from a SQL injection vulnerability (CNVD-2021-23374)

JPress is a product developed using Java, similar to WordPress. JPress suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in JPress

JPress is a product developed using Java, similar to WordPress. JPress suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

JPress has a logic flaw vulnerability (CNVD-2021-22936)

JPress is a product developed using Java, similar to WordPress. JPress has a logic flaw vulnerability that can be exploited by attackers to obtain sensitive information...

JPress suffers from an XML entity injection vulnerability

JPress a use of Java development, similar to WordPress products. JPress has an XML entity injection vulnerability that can be exploited by an attacker to read server files...

JPress has a flawed logic vulnerability

JPress is a product developed using Java, similar to WordPress. JPress has a logic flaw vulnerability that can be exploited by attackers to obtain sensitive information...

File Upload Vulnerability in JPress 3.3.0 Backend

JPress a product developed using Java, similar to WordPress. Born to integrate the WeChat ecosystem, simple and easy to get started. Dedicated to creating an autonomous self-owned marketing platform for enterprises, using technology to help enterprises marketing cash. JPress3.3.0 there is a file...

Arbitrary File Read Vulnerability in jpress

JPress a product developed using Java, similar to WordPress. Born to integrate the WeChat ecosystem, simple and easy to get started. Dedicated to creating an autonomous self-owned marketing platform for enterprises, using technology to help enterprises marketing cash. jpress there is an arbitrary...

File upload vulnerability in jpress

JPress is a product developed in Java, similar to WordPress. Incorporating the microsoft ecosystem, the jpress has a file upload vulnerability that can be exploited by attackers to gain access to the web server...

JPress Cross-Site Scripting Vulnerability (CNVD-2019-01670)

JPress is a set of blogging platform developed using the Java language. A cross-site scripting vulnerability exists in JPress version 1.0.4, which can be exploited by remote attackers to inject arbitrary web script or HTML with the help of Markdown input...

CVE-2019-6278

XSS exists in JPress v1.0.4 via Markdown input, or Markdown input with the code input option...

CVE-2019-6278

XSS exists in JPress v1.0.4 via Markdown input, or Markdown input with the code input option...

CVE-2019-6278

XSS exists in JPress v1.0.4 via Markdown input, or Markdown input with the code input option...

CVE-2019-6278

XSS exists in JPress v1.0.4 via Markdown input, or Markdown input with the code input option...

CVE-2019-6278

CVE-2019-6278 is an XSS vulnerability in JPress v1.0.4 exploitable via Markdown input (and Markdown input with the code input option). Affected component: JPress Markdown processing. Root cause and exact exploit vector are not detailed across the provided documents beyond the XSS claim. Several s...

PT-2019-18068

Name of the Vulnerable Software and Affected Versions JPress version 1.0.4 Description The issue exists due to XSS in Markdown input, which can also be triggered when using the code input option. Recommendations For JPress version 1.0.4, consider disabling Markdown input or restricting the use of...