Cross site scripting

2010-12-2922:33:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.3%

JSON

Cross-site scripting (XSS) vulnerability in modules/content/admin/content.php in ImpressCMS 1.2.3 Final, and possibly other versions before 1.2.4, allows remote attackers to inject arbitrary web script or HTML via the quicksearch_ContentContent parameter.

CPENameOperatorVersion
impresscmseq1.1 alpha1
impresscmseq1.2.3 rc2
impresscmseq1.1.3 beta
impresscmseq1.1 beta1
impresscmseq1.2 final
impresscmseq1.1 alpha2
impresscmseq1.1 rc2
impresscmseq1.1.1 rc1
impresscmseq1.1.3 final
impresscmseq1.0 rc1

Name	Operator	Version
impresscms	eq	1.1 alpha1
impresscms	eq	1.2.3 rc2
impresscms	eq	1.1.3 beta
impresscms	eq	1.1 beta1
impresscms	eq	1.2 final
impresscms	eq	1.1 alpha2
impresscms	eq	1.1 rc2
impresscms	eq	1.1.1 rc1
impresscms	eq	1.1.3 final
impresscms	eq	1.0 rc1