high8.8
CVE-2021-45808
jpress v4.2.0 allows users to register an account by default.
Impact
jpress v4.2.0 allows users to register an account by default. With the account, user can upload arbitrary files to the server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jpress | Jpress | Version 4.2.0 |