CVE-2021-46117
Assigner: mitre
Published: 2022-01-26T15:15:27
State: PUBLISHED
affected: product: n/a
vendor: n/a
versions: status: affected
version: n/a
descriptions: value: jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.page.PageNotifyKit#doSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code.
problemTypes: descriptions: description: n/a
type: text