Jpress vulnerabilities

Products

• Jpress 19

Newest

• guizhou xiaoma technology jpress Guizhou Xiaoma Technology jpress Attachment Upload upload AttachmentUtils.isUnSafe cross site scripting CVE-2024-12348 5.3 MediumDecember 9, 2024
• guizhou xiaoma technology jpress Guizhou Xiaoma Technology jpress Avatar upload cross site scripting CVE-2024-11971 5.3 MediumNovember 28, 2024
• jpress Jpress until v5.1.1 has arbitrary file uploads on the windows platform, and the construction of... CVE-2024-50919 9.8 CriticalNovember 18, 2024
• jpress A Server-Side Request Forgery (SSRF) vulnerability exists in the jpress <= v5.1.1, which can be... CVE-2024-46468 7.5 HighOctober 11, 2024
• guizhou xiaoma technology jpress jpress Template Module edit path traversal CVE-2024-8304 5.1 MediumAugust 29, 2024
• jpress JPress through 5.1.1 on Windows has an arbitrary file upload vulnerability that could cause... CVE-2024-43033 8.8 HighAugust 22, 2024
• jpress An issue in Jpress v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted... CVE-2024-32358 7.5 HighApril 25, 2024
• jpress A remote code execution (RCE) vulnerability in HelloWorldAddonController.java of jpress v4.2.0... CVE-2022-23330 8.8 HighFebruary 4, 2022
• jpress jpress v 4.2.0 is vulnerable to RCE via io.jpress.module.product.ProductNotifyKit#doSendEmail.... CVE-2021-46114 8.8 HighJanuary 26, 2022
• jpress jpress 4.2.0 is vulnerable to RCE via io.jpress.web.admin._TemplateController#doUploadFile. The... CVE-2021-46115 7.2 HighJanuary 26, 2022
• jpress jpress 4.2.0 is vulnerable to remote code execution via io.jpress.web.admin._TemplateController... CVE-2021-46116 7.2 HighJanuary 26, 2022
• jpress jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.article.kit... CVE-2021-46118 7.2 HighJanuary 26, 2022
• jpress jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.page.PageNotifyKit... CVE-2021-46117 7.2 HighJanuary 26, 2022
• jpress jpress v4.2.0 allows users to register an account by default. With the account, user can upload... CVE-2021-45808 8.8 HighJanuary 19, 2022
• jpress jpress v4.2.0 is vulnerable to command execution via io.jpress.web.admin._AddonController:... CVE-2021-45807 9.8 CriticalJanuary 13, 2022
• jpress jpress v4.2.0 admin panel provides a function through which attackers can modify the template and... CVE-2021-45806 8.8 HighJanuary 13, 2022
• jpress An issue was discovered in JPress v3.3.0 and below. There are XSS vulnerabilities in the template... CVE-2021-33347 5.4 MediumJune 18, 2021
• jpress XSS exists in JPress v1.0.4 via Markdown input, or Markdown input with the code input option. CVE-2019-6278 5.4 MediumJanuary 14, 2019
• jpress In JPress v1.0-rc.5, there is stored XSS via each of the first three input fields to the starter... CVE-2018-19170 4.8 MediumNovember 11, 2018