Description
jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.page.PageNotifyKit#doSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code.
Unscored
CVE-2021-46117
EUVD-2021-32817GHSA-9rv9-qv4p-8cjw
jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.page.PageNotifyKit#doSendEmail. The admin panel provides a functio…
Published Jan 26, 2022 · Updated Jul 9, 2026 · Assigned by mitre