CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 2CVE-2021-33347
https://notcve.org/view.php?id=CVE-2021-33347
18 Jun 2021 — An issue was discovered in JPress v3.3.0 and below. There are XSS vulnerabilities in the template module and tag management module. If you log in to the background by means of weak password, the storage XSS vulnerability can occur. Se ha detectado un problema en JPress versiones v3.3.0 y posteriores. Se presentan vulnerabilidades de tipo XSS en el módulo de plantillas y en el módulo de administrador de etiquetas. • https://github.com/JPressProjects/jpress/issues/152 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 1CVE-2019-6278
https://notcve.org/view.php?id=CVE-2019-6278
14 Jan 2019 — XSS exists in JPress v1.0.4 via Markdown input, or Markdown input with the code input option. Hay Cross-Site Scripting (XSS) en la versión v1.0.4 de JPress mediante entradas Markdown o entradas Markdown con la opción de introducir entradas de código. • https://gitee.com/fuhai/jpress/issues/IQUXE • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •