CVE-2021-46117 | BDVDB-2026-168652 Detail

Description#

jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.page.PageNotifyKit#doSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/JPressProjects/jpress
https://github.com/JPressProjects/jpress/issues/171

Exploit#

No public exploit known

History#

Version 12022-01-26Record published in the CVE List.
Version 22026-07-09Most recent update recorded in the CVE List.