CVE-2020-17551

2020-10-0717:15:13

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.9%

JSON

ImpressCMS 1.4.0 is affected by XSS in modules/system/admin.php which may result in arbitrary remote code execution.

CPENameOperatorVersion
impresscmseq1.3.8
impresscmseq1.4.0-rc
impresscmseq1.4.0-alpha
impresscmseq1.3.9
impresscmseq1.3.9_rc
impresscmseqimpresscms_1.3.4
impresscmseq1.4.0-alpha.2
impresscmseq1.4.0-beta
impresscmseq1.3.11-beta2
impresscmseq1.3.11-beta

Name	Operator	Version
impresscms	eq	1.3.8
impresscms	eq	1.4.0-rc
impresscms	eq	1.4.0-alpha
impresscms	eq	1.3.9
impresscms	eq	1.3.9_rc
impresscms	eq	impresscms_1.3.4
impresscms	eq	1.4.0-alpha.2
impresscms	eq	1.4.0-beta
impresscms	eq	1.3.11-beta2
impresscms	eq	1.3.11-beta