Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 23

Export CSV
CVE-2021-26598

ImpressCMS before 1.4.3 has Incorrect Access Control because include/findusers.php allows access by unauthenticated attackers (who are, by design, able to have a security token).

CVSS 3.1 · 5.3 Medium EPSS 10.5% KEV · Not listed
Vendors
Impresscms
Products
Impresscms
CVE-2020-17551

ImpressCMS 1.4.0 is affected by XSS in modules/system/admin.php which may result in arbitrary remote code execution.

CVSS 3.1 · 4.8 Medium EPSS 1.1% KEV · Not listed
Vendors
Impresscms
Products
Impresscms
CVE-2018-13983

ImpressCMS 1.3.10 has XSS via the PATH_INFO to htdocs/install/index.php, htdocs/install/page_langselect.php, or htdocs/install/page_modcheck.php.

CVSS 3.0 · 6.1 Medium EPSS 1.5% KEV · Not listed
Vendors
Impresscms
Products
Impresscms