This vulnerability affects JPress versions 1.0.0 through 1.0.3 in the UCenter Article Submission Endpoint component. An attacker can manipulate the id/userId parameters in the /ucenter/article/doWriteSave function to bypass authorization controls. The vulnerability is remotely exploitable without user interaction and requires low privileges. The CVSS 4.0 base score is 5.3, indicating a medium severity level. The vendor has been notified but has not provided a remediation or patch as of the published date.

Successful exploitation could allow an attacker with limited privileges to perform unauthorized actions related to article submission in JPress. This could lead to unauthorized content creation or modification. There is no indication of privilege escalation beyond the affected function or of broader system compromise. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch is available and the vendor has not responded, users should consider restricting access to the affected endpoint and monitor for suspicious activity related to article submission. Avoid exposing the vulnerable endpoint to untrusted networks until a patch is released.