jpress v4.2.0 is vulnerable to command execution via io.jpress.web.admin._AddonController::doUploadAndInstall.

Published Jan 13, 2022 · Updated Jul 9, 2026 · Assigned by mitre