EUVD-2022-3868

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

ImpressCMS 1.3.10 has XSS vulnerability via PATH_INFO in install scripts

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2018-13983	6 May 201922:33	–	circl
CNVD	Multiple Cross-Site Scripting Vulnerabilities in ImpressCMS	7 Jan 201900:00	–	cnvd
CVE	CVE-2018-13983	6 May 201918:20	–	cve
Cvelist	CVE-2018-13983	6 May 201918:20	–	cvelist
Github Security Blog	ImpressCMS XSS	24 May 202216:45	–	github
NVD	CVE-2018-13983	6 May 201919:29	–	nvd
OSV	GHSA-G32Q-4FHF-CQ72 ImpressCMS XSS	24 May 202216:45	–	osv
Packet Storm	ImpressCMS 1.3.10 Cross Site Scripting	2 Jan 201900:00	–	packetstorm
Prion	Design/Logic Flaw	6 May 201919:29	–	prion

[
  {
    "enisaIdVendor": [
      {
        "id": "ab1d9bf9-af26-385e-9192-180adcd4d3f2",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "cb19ff0e-d94f-3eb8-8732-c4841f4ecf44",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-13983
github	www.github.com/ImpressCMS/impresscms
netsparker	www.netsparker.com/web-applications-advisories/ns-18-033-cross-site-scripting-in-impresscms
packetstormsecurity	www.packetstormsecurity.com/files/150990/ImpressCMS-1.3.10-Cross-Site-Scripting.html
seclists	www.seclists.org/fulldisclosure/2019/Jan/8
packetstormsecurity	www.packetstormsecurity.com/files/cve/CVE-2018-13983
netsparker	www.netsparker.com/web-applications-advisories/ns-18-033-cross-site-scripting-in-impresscms/

03 Oct 2025 20:07Current

6.3Medium risk

Vulners AI Score6.3

CVSS 36.1

CVSS 24.3

EPSS0.00285

impresscms vulnerability xss path_info install scripts