CVE-2021-46114

CVE-2021-46114 affects jpress v4.2.0. The vulnerability is a remote code execution through io.jpress.module.product.ProductNotifyKit#doSendEmail , where the admin panel’s email template editor can be abused to inject malicious code. Impact: arbitrary code execution; reported in multiple sources. ...

Jpress 代码注入漏洞

Jpress is a set of blogging platform developed in Java language by Jpress team. A security vulnerability exists in jpress that stems from vulnerability to RCE attacks via io.jpress.module.product.ProductNotifyKit...