Cross-site scripting (XSS)

MÉDIO 5.4CVE-2021-28088 · GHSA-79hv-pfx6-hhpj · Published 11/03/2021 · updated 17/06/2026

Em resumo

CVE-2021-28088 é uma vulnerabilidade MÉDIO (CVSS 5.4) que afeta impresscms/impresscms, impresscms (impresscms).
Chance de exploração nos próximos 30 dias (EPSS): 0.87%, maior que 58.7% das vulnerabilidades.
Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.

Package	Affected versions	Patched versions
impresscms/impresscms Packagist	`≤ 1.4.2`	No fix yet
impresscms impresscms	`= 1.4.2`	No fix yet

Description

Cross-site scripting (XSS) in modules/content/admin/content.php in ImpressCMS profile 1.4.2 allows remote attackers to inject arbitrary web script or HTML parameters through the "Display Name" field.

NVD description

Cross-site scripting (XSS) in modules/content/admin/content.php in ImpressCMS profile 1.4.2 allows remote attackers to inject arbitrary web script or HTML parameters through the "Display Name" field.

References

nvd.nist.gov/vuln/detail/CVE-2021-28088 · ADVISORY
hackerone.com/reports/1119296 · WEB
anotepad.com/note/read/s3kkk6h7 · WEB

Mais vulnerabilidades de impresscms/impresscms

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

impresscms/impresscms

Packagist

≤ 1.4.2

No fix yet

impresscms

= 1.4.2

No fix yet

Description

Cross-site scripting (XSS) in modules/content/admin/content.php in ImpressCMS profile 1.4.2 allows remote attackers to inject arbitrary web script or HTML parameters through the "Display Name" field.

NVD description

Cross-site scripting (XSS) in modules/content/admin/content.php in ImpressCMS profile 1.4.2 allows remote attackers to inject arbitrary web script or HTML parameters through the "Display Name" field.

Mais vulnerabilidades de impresscms/impresscms

Ver tudo →