3 results (0.004 seconds)

CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 2

CVE-2021-33347

https://notcve.org/view.php?id=CVE-2021-33347

18 Jun 2021 — An issue was discovered in JPress v3.3.0 and below. There are XSS vulnerabilities in the template module and tag management module. If you log in to the background by means of weak password, the storage XSS vulnerability can occur. Se ha detectado un problema en JPress versiones v3.3.0 y posteriores. Se presentan vulnerabilidades de tipo XSS en el módulo de plantillas y en el módulo de administrador de etiquetas. • https://github.com/JPressProjects/jpress/issues/152 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 1

CVE-2019-6278

https://notcve.org/view.php?id=CVE-2019-6278

14 Jan 2019 — XSS exists in JPress v1.0.4 via Markdown input, or Markdown input with the code input option. Hay Cross-Site Scripting (XSS) en la versión v1.0.4 de JPress mediante entradas Markdown o entradas Markdown con la opción de introducir entradas de código. • https://gitee.com/fuhai/jpress/issues/IQUXE • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 4.8EPSS: 0%CPEs: 1EXPL: 1

CVE-2018-19170

https://notcve.org/view.php?id=CVE-2018-19170

11 Nov 2018 — In JPress v1.0-rc.5, there is stored XSS via each of the first three input fields to the starter-tomcat-1.0/admin/setting URI, as demonstrated by the web_name parameter. En JPress v1.0-rc.5, hay Cross-Site Scripting (XSS) almacenado a través de cada uno de los tres primeros campos de entrada en el URI de Starter-tomcat-1.0/admin/setting, tal y como lo demuestra el parámetro web_name. • https://github.com/JpressProjects/jpress/issues/89 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •