Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-52159 2 Ppress, Yandaozi 2 Cms, Ppress 2025-09-25 8.8 High
Hardcoded credentials in default configuration of PPress 0.0.9.
CVE-2025-54761 2 Ppress, Yandaozi 2 Cms, Ppress 2025-09-25 8 High
An issue was discovered in PPress 0.0.9 allowing attackers to gain escilated privlidges via crafted session cookie.
CVE-2025-54815 2 Ppress, Yandaozi 2 Cms, Ppress 2025-09-25 8.8 High
Server-side template injection (SSTI) vulnerability in PPress 0.0.9 allows attackers to execute arbitrary code via crafted themes.