CVE-2021-33347

PoC ×2—

CVSS 3.1

5.4 medium

EPSS

<1%p44

Published

Jun 18, 2021 (Jun 18, 2021)

Modified

Jun 17, 2026

Description

An issue was discovered in JPress v3.3.0 and below. There are XSS vulnerabilities in the template module and tag management module. If you log in to the background by means of weak password, the storage XSS vulnerability can occur.

Vendors: jpress
Products: jpress
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.