Impresscms vulnerabilities

Products

• Impresscms 23

Newest

• impresscms ImpressCMS Authenticated RCE via PHP Custom Tag eval() CVE-2026-73679 8.6 HighAugust 14, 2026
• impresscms ImpressCMS 1.4.2 Remote Code Execution via Autotasks CVE-2021-47938 8.7 HighMay 10, 2026
• impresscms ImpressCMS 1.3.11 SQL Injection via bid Parameter CVE-2019-25703 7.1 HighApril 12, 2026
• impresscms ImpressCMS 1.4.4 - Unrestricted File Upload CVE-2022-50912 9.3 CriticalJanuary 13, 2026
• impresscms ImpressCMS Cross-site Scripting vulnerability CVE-2023-37785 4.8 MediumJuly 13, 2023
• impresscms SQL injection in ImpressCMS CVE-2022-26986 Public exploit 7.2 HighApril 5, 2022
• impresscms Path Traversal in ImpressCMS CVE-2021-26601 Fix available 8.1 HighMarch 28, 2022
• impresscms Type Confusion in ImpressCMS CVE-2021-26600 Fix available 9.8 CriticalMarch 28, 2022
• impresscms SQL Injection in ImpressCMS CVE-2021-26599 Public exploitFix available EPSS 21.0% 9.8 CriticalMarch 28, 2022
• impresscms Incorrect Access Control in ImpressCMS CVE-2021-26598 Fix available EPSS 10.5% 5.3 MediumMarch 28, 2022
• impresscms Path Traversal in ImpressCMS CVE-2022-24977 Fix available 9.8 CriticalFebruary 13, 2022
• impresscms Cross-site scripting (XSS) CVE-2021-28088 5.4 MediumMarch 11, 2021
• impresscms Cross-site scripting (XSS) CVE-2020-17551 Fix available 4.8 MediumOctober 7, 2020
• impresscms ImpressCMS XSS CVE-2018-13983 6.1 MediumMay 6, 2019
• impresscms ImpressCMS Path Traversal to Arbitrary File Delete CVE-2014-1836 Public exploitFix available 6.4 MediumJuly 1, 2015
• impresscms ImpressCMS Cross-site scripting Vulnerability CVE-2014-4036 4.3 MediumJune 11, 2014
• impresscms Directory traversal vulnerability in edituser.php in ImpressCMS 1.2.x before 1.2.7 Final and 1.3... CVE-2012-0987 6.0 MediumOctober 6, 2012
• impresscms Multiple cross-site scripting (XSS) vulnerabilities in ImpressCMS 1.2.x before 1.2.7 Final and 1... CVE-2012-0986 4.3 MediumOctober 6, 2012
• impresscms ImpressCMS Cross-site Scripting vulnerability via quicksearch_ContentContent parameter CVE-2010-4616 Fix available 4.3 MediumDecember 29, 2010
• impresscms SQL injection vulnerability in ImpressCMS before 1.2.3 RC2 allows remote attackers to execute... CVE-2010-4271 7.5 HighNovember 16, 2010
• impresscms Cross-site scripting (XSS) vulnerability in the userranks feature in modules/system/admin.php in... CVE-2008-6360 4.3 MediumMarch 2, 2009
• impresscms Session fixation vulnerability in Social ImpressCMS before 1.1.1 RC1 allows remote attackers to... CVE-2008-5964 6.8 MediumJanuary 23, 2009
• impresscms Multiple unspecified vulnerabilities in ImpressCMS 1.0 have unknown impact and attack vectors,... CVE-2008-3453 10.0 HighAugust 4, 2008