ImpressCMS Cross-Site Scripting Vulnerability (CNVD-2021-17253)

ImpressCMS is a MySQL-based, modular content management system CMS. The system includes modules for press releases, forums and photo albums. A cross-site scripting vulnerability exists in ImpressCMS profile version 1.4.2, which stems from a Display Name field that is not validly filtered for inpu...