Vendors / Yandaozi Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 3
Exploited now Yandaozi records in CISA KEV No Yandaozi vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 73
Server-side template injection (SSTI) vulnerability in PPress 0.0.9 allows attackers to execute arbitrary code via crafted themes.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0061 · Published 2025-09-19 · No fix listed CWE-94
Priority HIGH 73
Hardcoded credentials in default configuration of PPress 0.0.9.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00421 · Published 2025-09-19 · No fix listed CWE-798
Priority HIGH 70
An issue was discovered in PPress 0.0.9 allowing attackers to gain escilated privlidges via crafted session cookie.
CVSS 3.1 HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00327 · Published 2025-09-19 · No fix listed CWE-269
Priority LOW 32
A stored Cross Site Scripting vulnerability in the "related recommendations" feature in Ppress v.0.0.9 allows a remote attacker to execute arbitrary code via a crafted script to the article.title, article.category, and a…
CVSS 3.1 MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.0054 · Published 2025-02-20 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 3 1 0 0
THREATIST.IORead the docs