CVE-2021-46114

jpress v 4.2.0 is vulnerable to RCE via io.jpress.module.product.ProductNotifyKitdoSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code...

CVE-2021-46114

jpress v 4.2.0 is vulnerable to RCE via io.jpress.module.product.ProductNotifyKitdoSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code...

CVE-2021-46118

jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.article.kit.ArticleNotifyKitdoSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code...

CVE-2021-46118

jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.article.kit.ArticleNotifyKitdoSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code...

CVE-2021-46117

jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.page.PageNotifyKitdoSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code...

CVE-2021-46117: Improper Control of Generation of Code

jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.page.PageNotifyKitdoSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code...

PT-2022-12577

Name of the Vulnerable Software and Affected Versions jpress version 4.2.0 Description The issue allows for remote code execution via the io.jpress.module.article.kit.ArticleNotifyKitdoSendEmail function. The admin panel provides a function through which attackers can edit the email templates and...

PT-2022-12576

Name of the Vulnerable Software and Affected Versions jpress version 4.2.0 Description The issue allows for remote code execution via the io.jpress.module.page.PageNotifyKitdoSendEmail function. This is possible because the admin panel provides a function that enables attackers to edit email...

PT-2022-12573

Name of the Vulnerable Software and Affected Versions jpress version 4.2.0 Description The issue allows for remote code execution RCE via the io.jpress.module.product.ProductNotifyKitdoSendEmail function. This is possible because the admin panel provides a function that enables attackers to edit...

CVE-2021-46114: Improper Control of Generation of Code

jpress v 4.2.0 is vulnerable to RCE via io.jpress.module.product.ProductNotifyKitdoSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code...