Skip to content
Heist/ feed
Back to feed
Medium

Security advisory

Type: advisorySources: OSVCVE: CVE-2021-33347

An issue was discovered in JPress v3.3.0 and below. There are XSS vulnerabilities in the template module and tag management module. If you log in to the background by means of weak password, the storage XSS vulnerability can occur.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2021-33347
Confirmed fixed CVEs
Not specified
Updated in this feed
31 Oct 2026, 11:47 UTC · Revision 1

Source evidence

CVE-2021-33347

core-osv · Original source

Published 18 Jun 2021, 11:15 UTC

An issue was discovered in JPress v3.3.0 and below. There are XSS vulnerabilities in the template module and tag management module. If you log in to the background by means of weak password, the storage XSS vulnerability can occur.

osv:CVE-2021-33347
Complete source record
{
  "id": "4535dc79ef9371b74da2b95137c3d7a796442424903e1faac36e057d0ed9bb75",
  "url": "https://osv.dev/vulnerability/CVE-2021-33347",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "CVE-2021-33347",
    "summary": "An issue was discovered in JPress v3.3.0 and below. There are XSS vulnerabilities in the template module and tag management module. If you log in to the background by means of weak password, the storage XSS vulnerability can occur.",
    "evidence": "osv:CVE-2021-33347",
    "products": [],
    "severity": "medium",
    "structured": {
      "id": "CVE-2021-33347",
      "aliases": [
        "CVE-2021-33347"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://github.com/jpressprojects/jpress",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "last_affected": "6bfdc2e19e4b9f3f2bdbcc62fb2a6c815e279df0"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "cpe": "cpe:2.3:a:jpress:jpress:*:*:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "last_affected": "3.3.0"
                      }
                    ],
                    "source": "CPE_RANGE"
                  }
                ]
              }
            }
          ],
          "versions": [
            "v3.3.0",
            "v3.2.5",
            "v3.2.4",
            "v3.2.3",
            "v3.2.2",
            "v3.2.1",
            "v3.2.0",
            "v3.1.1",
            "v3.1.0",
            "v3.0.6",
            "v3.0.5",
            "v3.0.4",
            "v3.0.3",
            "v3.0.2",
            "v3.0.1",
            "v3.0.0",
            "v3.0.0-rc.3",
            "v3.0.0-rc.2",
            "v3.0-rc.1",
            "v3.0.0-beta.2",
            "v3.0.0-beta.1",
            "v3.0.0-alpha.2",
            "v3.0.0-alpha.1",
            "v2.0.8",
            "v2.0.7",
            "v2.0.6",
            "v2.0.5",
            "v2.0.4",
            "v2.0.3",
            "v2.0.2",
            "v2.0.1",
            "v2.0-rc.9",
            "v2.0-rc.8",
            "v2.0-rc.7",
            "v2.0-rc.6",
            "v1.0.5",
            "v1.0.4",
            "v1.0.3",
            "v1.0.2",
            "v1.0.1",
            "v1.0",
            "v1.0-rc.10",
            "v1.0-rc.9",
            "v1.0-rc.8",
            "v1.0-rc.6",
            "v1.0-rc.7",
            "v1.0-rc.5",
            "v1.0-rc.4",
            "v1.0-rc.3",
            "v1.0-rc2",
            "v1.0-rc1",
            "v1.0-beta3",
            "v1.0-beta2",
            "v1.0-beta1",
            "0.4.0",
            "0.3.0",
            "0.2.7",
            "0.2.6",
            "0.2.5",
            "0.2.4",
            "0.2.3",
            "0.2.2",
            "0.2.1",
            "0.2",
            "0.1",
            "0.0.3",
            "0.0.2",
            "0.0.1"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-33347.json"
          }
        }
      ],
      "modified": "2026-10-20T10:54:43.639637353Z",
      "provider": "osv",
      "references": [
        "https://github.com/JPressProjects/jpress/issues/152",
        "https://github.com/JPressProjects/jpress/issues/152#issuecomment-850119847"
      ],
      "provider_metadata": {}
    },
    "related_cves": [
      {
        "value": "CVE-2021-33347",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 386009,
  "published_at": "2021-06-18T11:15:08.683+00:00"
}