CVE-2021-46114

jpress v 4.2.0 is vulnerable to RCE via io.jpress.module.product.ProductNotifyKitdoSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code...

CVE-2021-46114

CVE-2021-46114 affects jpress v4.2.0. The vulnerability is a remote code execution through io.jpress.module.product.ProductNotifyKit#doSendEmail , where the admin panel’s email template editor can be abused to inject malicious code. Impact: arbitrary code execution; reported in multiple sources. ...

PT-2022-12573

Name of the Vulnerable Software and Affected Versions jpress version 4.2.0 Description The issue allows for remote code execution RCE via the io.jpress.module.product.ProductNotifyKitdoSendEmail function. This is possible because the admin panel provides a function that enables attackers to edit...

Jpress 代码注入漏洞

Jpress is a set of blogging platform developed in Java language by Jpress team. A security vulnerability exists in jpress that stems from vulnerability to RCE attacks via io.jpress.module.product.ProductNotifyKit...

CVE-2021-46114: Improper Control of Generation of Code

jpress v 4.2.0 is vulnerable to RCE via io.jpress.module.product.ProductNotifyKitdoSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code...