Search Results (23 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2021-26598 1 Impresscms 1 Impresscms 2024-11-21 5.3 Medium
ImpressCMS before 1.4.3 has Incorrect Access Control because include/findusers.php allows access by unauthenticated attackers (who are, by design, able to have a security token).
CVE-2020-17551 1 Impresscms 1 Impresscms 2024-11-21 4.8 Medium
ImpressCMS 1.4.0 is affected by XSS in modules/system/admin.php which may result in arbitrary remote code execution.
CVE-2018-13983 1 Impresscms 1 Impresscms 2024-11-21 N/A
ImpressCMS 1.3.10 has XSS via the PATH_INFO to htdocs/install/index.php, htdocs/install/page_langselect.php, or htdocs/install/page_modcheck.php.