CVE-2021-33347

CVE-2021-33347 affects JPress v3.3.0 and earlier. The issue is stored XSS originating from the template module and the tag management module, exploitable when a background login occurs via weak passwords. Impact is described as storage XSS with potential credential-related login context enabling ...