CVE-2021-45807

jpress v4.2.0 is vulnerable to command execution via io.jpress.web.admin.AddonController::doUploadAndInstall...

CVE-2021-45806

jpress v4.2.0 admin panel provides a function through which attackers can modify the template and inject some malicious code...

CVE-2021-45806

jpress v4.2.0 admin panel provides a function through which attackers can modify the template and inject some malicious code...

CVE-2021-45806

jpress v4.2.0 admin panel provides a function through which attackers can modify the template and inject some malicious code...

Code injection

jpress v4.2.0 admin panel provides a function through which attackers can modify the template and inject some malicious code...

CVE-2021-45806

jpress v4.2.0 admin panel provides a function through which attackers can modify the template and inject some malicious code...

CVE-2021-45806

CVE-2021-45806 affects jpress v4.2.0: the admin panel exposes a function that allows attackers to modify templates and inject malicious code. The reported impact is malicious code injection via template modification, but the provided documents do not specify the exact root cause, vulnerable compo...

Jpress code injection vulnerability

Jpress is a set of blogging platform developed by the Jpress team using the Java language. jpress has a security vulnerability that can be exploited by attackers to inject some malicious code through functional modifications to the template...

Jpress command injection vulnerability

Jpress is a set of blogging platforms developed by the Jpress team using the Java language. an access control error vulnerability exists in Jpress, which stems from the product allowing the io.jpress.web.admin.AddonController::doUploadAndInstall function to execute commands. No detailed...

PT-2022-12415 · Jpress · Jpress

Name of the Vulnerable Software and Affected Versions: jpress version 4.2.0 Description: The issue allows for command execution via the io.jpress.web.admin. AddonController::doUploadAndInstall function. Recommendations: For jpress version 4.2.0, at the moment, there is no information about a newe...

PT-2022-12414

Name of the Vulnerable Software and Affected Versions jpress version 4.2.0 Description The issue allows attackers to modify the template and inject malicious code through a function in the admin panel. Recommendations For jpress version 4.2.0, consider disabling access to the admin panel's templa...

CVE-2021-45807: Undefined Security Weakness

jpress v4.2.0 is vulnerable to command execution via io.jpress.web.admin.AddonController::doUploadAndInstall...

CVE-2021-45806: Improper Control of Generation of Code

jpress v4.2.0 admin panel provides a function through which attackers can modify the template and inject some malicious code...

CVE-2021-33347

An issue was discovered in JPress v3.3.0 and below. There are XSS vulnerabilities in the template module and tag management module. If you log in to the background by means of weak password, the storage XSS vulnerability can occur...

CVE-2021-33347

An issue was discovered in JPress v3.3.0 and below. There are XSS vulnerabilities in the template module and tag management module. If you log in to the background by means of weak password, the storage XSS vulnerability can occur...

Cross site scripting

An issue was discovered in JPress v3.3.0 and below. There are XSS vulnerabilities in the template module and tag management module. If you log in to the background by means of weak password, the storage XSS vulnerability can occur...

CVE-2021-33347

An issue was discovered in JPress v3.3.0 and below. There are XSS vulnerabilities in the template module and tag management module. If you log in to the background by means of weak password, the storage XSS vulnerability can occur...

CVE-2021-33347

An issue was discovered in JPress v3.3.0 and below. There are XSS vulnerabilities in the template module and tag management module. If you log in to the background by means of weak password, the storage XSS vulnerability can occur...

CVE-2021-33347

CVE-2021-33347 affects JPress v3.3.0 and earlier. The issue is stored XSS originating from the template module and the tag management module, exploitable when a background login occurs via weak passwords. Impact is described as storage XSS with potential credential-related login context enabling ...

PT-2021-20122

Name of the Vulnerable Software and Affected Versions JPress versions 3.3.0 and below Description An issue was discovered in the template module and tag management module, leading to XSS vulnerabilities. If a user logs in to the background using a weak password, a storage XSS vulnerability can...