quarter77/PPress-CMS_vulnerability_chain_details

quarter77/PPress-CMS_vulnerability_chain_details

GitHubGitHub
GitHubgithub.com
Releases0
PPress-CMS vulnerability chain details
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-52159↗
8.8 HIGH—

Hardcoded credentials in default configuration of PPress 0.0.9.

CVE-2025-54761↗
8 HIGH—

An issue was discovered in PPress 0.0.9 allowing attackers to gain escilated privlidges via crafted session cookie.

CVE-2025-54815↗
8.8 HIGH—

Server-side template injection (SSTI) vulnerability in PPress 0.0.9 allows attackers to execute arbitrary code via crafted themes.