Vulnerabilities

TI-2025-34569 CVE-2025-54815 · GHSA-8xrg-qhp8-h7wh

Server-side template injection (SSTI) vulnerability in PPress 0.0.9 allows attackers to…

HIGH 73

Server-side template injection (SSTI) vulnerability in PPress 0.0.9 allows attackers to execute arbitrary code via crafted themes.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0061 Published 2025-09-19 No fix listed CWE-94

TI-2025-34522 CVE-2025-54761 · GHSA-87wr-f39x-xr23

An issue was discovered in PPress 0.0.9 allowing attackers to gain escilated privlidges via crafted session cookie.

HIGH 70

An issue was discovered in PPress 0.0.9 allowing attackers to gain escilated privlidges via crafted session cookie.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00327 Published 2025-09-19 No fix listed CWE-269

TI-2025-32489 CVE-2025-52159 · GHSA-34gm-7vmj-9jg6

Hardcoded credentials in default configuration of PPress 0.0.9.

HIGH 73

Hardcoded credentials in default configuration of PPress 0.0.9.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00421 Published 2025-09-19 No fix listed CWE-798

TI-2025-19205 CVE-2025-25973 · GHSA-gmw5-xjxq-3255

A stored Cross Site Scripting vulnerability in the "related recommendations" feature in…

LOW 32

A stored Cross Site Scripting vulnerability in the "related recommendations" feature in Ppress v.0.0.9 allows a remote attacker to execute arbitrary code via a crafted script to the article.title, article.category, and a…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.0054 Published 2025-02-20 No fix listed CWE-79

Vulnerabilities

Filters

Server-side template injection (SSTI) vulnerability in PPress 0.0.9 allows attackers to…

An issue was discovered in PPress 0.0.9 allowing attackers to gain escilated privlidges via crafted session cookie.

Hardcoded credentials in default configuration of PPress 0.0.9.

A stored Cross Site Scripting vulnerability in the "related recommendations" feature in…