← All advisories

Medium severity5.4OSV Advisory· Published Jan 14, 2019· Updated Jun 17, 2026

CVE-2019-6278

CVE-2019-6278

Description

XSS exists in JPress v1.0.4 via Markdown input, or Markdown input with the code input option.

Affected products

3

Jpress/jpress2 versions
cpe:2.3:a:jpress:jpress:1.0.4:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:jpress:jpress:1.0.4:*:*:*:*:*:*:*
- (no CPE)range: = 1.0.4
Jpressprojects/JpressOSV
Range: 0.0.1, 0.0.2, 0.0.3, …

Patches

Vulnerability mechanics

References

1

gitee.com/fuhai/jpress/issues/IQUXEnvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.