Description
jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.article.kit.ArticleNotifyKit#doSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code.
Unscored
CVE-2021-46118
EUVD-2021-32818GHSA-785g-rp7v-287f
jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.article.kit.ArticleNotifyKit#doSendEmail. The admin panel provides…
Published Jan 26, 2022 · Updated Jul 9, 2026 · Assigned by mitre