Unrated severityNVD Advisory· Published Jan 26, 2022· Updated Aug 4, 2024
CVE-2021-46114
CVE-2021-46114
Description
jpress v 4.2.0 is vulnerable to RCE via io.jpress.module.product.ProductNotifyKit#doSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- jpress/jpressdescription
- Range: =4.2.0
Patches
Vulnerability mechanics
References
2- jpress.commitrex_refsource_MISC
- github.com/JPressProjects/jpress/issues/172mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.