PT-2022-12573

Name of the Vulnerable Software and Affected Versions jpress version 4.2.0 Description The issue allows for remote code execution RCE via the io.jpress.module.product.ProductNotifyKitdoSendEmail function. This is possible because the admin panel provides a function that enables attackers to edit...