ImpressCMS Cross-site Scripting vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2023-37785 · ADVISORY
• CrownZTX/cve-description · WEB
• ImpressCMS/impresscms · PACKAGE

impresscms/impresscms의 다른 취약점

• CVE-2022-26986높음 7.2SQL Injection in ImpressCMS 1.4.3 and earlier allows remote attackers to inject into the code in unintended way, this allows an attacker to …
• CVE-2021-26601높음 8.1ImpressCMS before 1.4.3 allows libraries/image-editor/image-edit.php image_temp Directory Traversal.
• CVE-2021-26600심각 9.8ImpressCMS before 1.4.3 has plugins/preloads/autologin.php type confusion with resultant Authentication Bypass (!= instead of !==).
• CVE-2021-26599심각 9.8ImpressCMS before 1.4.3 allows include/findusers.php groups SQL Injection.
• CVE-2021-26598보통 5.3ImpressCMS before 1.4.3 has Incorrect Access Control because include/findusers.php allows access by unauthenticated attackers (who are, by d…