Path Traversal Vulnerability in JPress Template Module Handler

Summary

A significant vulnerability has been identified in JPress versions up to 5.1.1, specifically affecting the Template Module Handler. This vulnerability allows attackers to perform path traversal, enabling unauthorized access to the filesystem through the /admin/template/edit file. The exploit can be executed remotely, raising serious concerns for the security posture of affected installations. This critical issue has already been disclosed publicly, and attackers may leverage this vulnerability to compromise systems. Users are strongly advised to update their JPress installations to protect against potential exploitation.

References