CVE-2021-45808

CVE-2021-45808

jpress v4.2.0 allows users to register an account by default. With the account, user can upload arbitrary files to the server.

Source: CVE-2021-45808