CVE-2021-46117: Improper Control of Generation of Code

jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.page.PageNotifyKitdoSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code...

PT-2022-12576

Name of the Vulnerable Software and Affected Versions jpress version 4.2.0 Description The issue allows for remote code execution via the io.jpress.module.page.PageNotifyKitdoSendEmail function. This is possible because the admin panel provides a function that enables attackers to edit email...