XSS exists in JPress v1.0.4 via Markdown input, or Markdown input with the code input option.
No PoCs from references.
- https://github.com/ARPSyndicate/cvemon
- https://github.com/happyhacking-k/happyhacking-k