GCVE - cpe:2.3:a:yandaozi:ppress:0.0.9:beta:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:yandaozi:ppress:0.0.9:beta:*:*:*:*:*:*

part: a version: 0.0.9 update: beta

Vendor	Yandaozi (`c1fd44a3-5aba-5229-bee9-f554a4211c25`)
Product	Ppress (`10f0294a-3afb-5847-9dfd-9b77411868e3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
`pkg:github/yandaozi/ppress`	purl2cpe	2026-07-28 16:41:13.017813

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-54815`	vulnerable	2026-06-08 07:33:13.266556	Details available Server-side template injection (SSTI) vulnerability in PPress 0.0.9 allows attackers to execute arbitrary code via crafted themes. Published: 2025-09-19T00:00:00.000Z Updated: 2025-09-19T20:05:39.385Z Open on db.gcve.eu Reference links https://github.com/yandaozi/PPress/releases/tag/v0.0.9-beta https://github.com/quarter77/PPress-CMS_vulnerability_chain_details/blob/main/CVE-2025-54815%20Details.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-54761`	vulnerable	2026-06-08 07:33:13.173873	Details available An issue was discovered in PPress 0.0.9 allowing attackers to gain escilated privlidges via crafted session cookie. Published: 2025-09-19T00:00:00.000Z Updated: 2025-09-19T20:13:18.490Z Open on db.gcve.eu Reference links https://github.com/yandaozi/PPress/releases/tag/v0.0.9-beta https://github.com/quarter77/PPress-CMS_vulnerability_chain_details/blob/main/CVE-2025-54761%20Details.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-52159`	vulnerable	2026-06-08 07:31:11.388729	Details available Hardcoded credentials in default configuration of PPress 0.0.9. Published: 2025-09-19T00:00:00.000Z Updated: 2025-09-19T20:17:37.649Z Open on db.gcve.eu Reference links https://github.com/quarter77/PPress-CMS-session-forgery-SSTI-vulnerability-leads-to-remote-command-execution https://github.com/quarter77/PPress-CMS_vulnerability_chain_details/blob/main/CVE-2025-52159%20Details.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-25973`	vulnerable	2026-06-08 07:12:51.425283	Details available A stored Cross Site Scripting vulnerability in the "related recommendations" feature in Ppress v.0.0.9 allows a remote attacker to execute arbitrary code via a crafted script to the article.title, article.category, and article.tags parameters. Published: 2025-02-20T00:00:00.000Z Updated: 2025-02-20T19:44:42.373Z Open on db.gcve.eu Reference links https://github.com/yandaozi/PPress/issues/3 https://gist.github.com/coleak2021/512acaa12ba0987499d560967acff1d1	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Ppress

Notes

PURL mappings

Vulnerability references

Contribute