CVE-2021-28088

Cross-site scripting XSS in modules/content/admin/content.php in ImpressCMS profile 1.4.2 allows remote attackers to inject arbitrary web script or HTML parameters through the "Display Name" field...

CVE-2021-28088

Cross-site scripting XSS in modules/content/admin/content.php in ImpressCMS profile 1.4.2 allows remote attackers to inject arbitrary web script or HTML parameters through the "Display Name" field...

PT-2021-17737

Name of the Vulnerable Software and Affected Versions: ImpressCMS profile version 1.4.2 Description: The issue allows remote attackers to inject arbitrary web script or HTML parameters through the Display Name field in the modules/content/admin/content.php file, enabling cross-site scripting XSS...