Security Advisory
CVE-2021-46114
8.8
HIGH
Vulnerability Description
jpress v 4.2.0 is vulnerable to RCE via io.jpress.module.product.ProductNotifyKit#doSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code.
Published Date
January 26, 2022
Official Source
NIST NVD Advisory