Description
jpress 4.2.0 is vulnerable to RCE via io.jpress.web.admin._TemplateController#doUploadFile. The admin panel provides a function through which attackers can upload templates and inject some malicious code.
Unscored
CVE-2021-46115
EUVD-2021-32815GHSA-rqm3-q6wp-rx6g
jpress 4.2.0 is vulnerable to RCE via io.jpress.web.admin._TemplateController#doUploadFile. The admin panel provides a function through whi…
Published Jan 26, 2022 · Updated Jul 9, 2026 · Assigned by mitre