PT-2022-12574

Name of the Vulnerable Software and Affected Versions jpress version 4.2.0 Description The issue allows for remote code execution RCE via the io.jpress.web.admin. TemplateControllerdoUploadFile function. This function, accessible through the admin panel, enables attackers to upload templates and...