CVE-2025-54815

Impact

Server-side template injection (SSTI) vulnerability in PPress 0.0.9 allows attackers to execute arbitrary code via crafted themes.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/quarter77/PPress-CMS_vulnerability_chain_details/blob/main/CVE-2025-54815%20Details.md
• https://github.com/yandaozi/PPress/releases/tag/v0.0.9-beta