CVE-2014-4036

ImpressCMS 1.3.6.1 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in modules/system/admin.php in ImpressCMS 1.3.6.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter in a listimg action.

References (1)

Scores

EPSS 0.0022
EPSS Percentile 45.1%

Details

CWE
CWE-79
Status published
Products (3)
impresscms/impresscms
impresscms/impresscms Packagist
n/a/n/a
Published Jun 11, 2014
Tracked Since Feb 18, 2026