A vulnerability was found in Guizhou Xiaoma Technology jpress 5.1.2. It has been classified as problematic. Affected is the function
AttachmentUtils.isUnSafe of the file /commons/attachment/upload of the component Attachment Upload Handler. The manipulation of the argument files[] leads to cross site scripting.
This vulnerability is traded as CVE-2024-12348. It is possible to launch the attack remotely. Furthermore, there is an exploit available.
