ImpressCMS cross-site scripting vulnerability

ImpressCMS is a MySQL-based, modular content management system CMS. The system includes modules for press releases, forums and photo albums. A cross-site scripting vulnerability exists in ImpressCMS v1.4.5 and earlier versions, which stems from the lack of effective filtering and escaping of...

PT-2023-26105

Name of the Vulnerable Software and Affected Versions ImpressCMS versions 1.4.5 and earlier Description A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the smile code parameter of the component "/editprofile.php". This...