Cross-Site Scripting in ImpressCMS Affects Multiple Applications
CVE-2020-17551

4.8MEDIUM

Key Information:

Vendor

Impresscms

Status
Impresscms
Vendor
CVE Published:
7 October 2020

What is CVE-2020-17551?

ImpressCMS version 1.4.0 is vulnerable to a Cross-Site Scripting (XSS) flaw within the modules/system/admin.php file. This vulnerability allows an attacker to execute arbitrary code on the affected system, potentially leading to unauthorized access and manipulation of user data. Website administrators using this version should consider updating to the latest and secure version to mitigate risks.

References

https://www.impresscms.org/
x_refsource_MISC
https://github.com/ImpressCMS/impresscms/issues/659
x_refsource_MISC

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.