CVEvulnerability
CVE-2021-33347
5.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-06-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
An issue was discovered in JPress v3.3.0 and below. There are XSS vulnerabilities in the template module and tag management module. If you log in to the background by means of weak password, the storage XSS vulnerability can occur.
Affected configurations
• jpress jpress (<= 3.3.0)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- https://github.com/JPressProjects/jpress/issues/152 Exploit, Issue Tracking, Third Party Advisory
- https://github.com/JPressProjects/jpress/issues/152#issuecomment-850119847 Exploit, Issue Tracking, Third Party Advisory
- https://github.com/JPressProjects/jpress/issues/152 Exploit, Issue Tracking, Third Party Advisory
- https://github.com/JPressProjects/jpress/issues/152#issuecomment-850119847 Exploit, Issue Tracking, Third Party Advisory