Skip to content
OpenAdvisories

Vendor

ImpressCMS

4 known vulnerabilities.

Products

ImpressCMS 4
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.2
    CVE-2026-73679

    ImpressCMS Authenticated RCE via PHP Custom Tag eval()

    ImpressCMS contains an authenticated remote code execution vulnerability in the custom tag module that allows authenticated administrators to execute arbitrary PHP code by storing a malicious payload in a custom tag with PHP type enabled. The application deco…

    ImpressCMS ImpressCMS
  • High 8.8
    CVE-2021-47938

    ImpressCMS 1.4.2 Remote Code Execution via Autotasks

    ImpressCMS 1.4.2 contains a remote code execution vulnerability in the autotasks administrative interface that allows authenticated attackers to execute arbitrary PHP code by injecting malicious code into the sat_code parameter. Attackers can authenticate, su…

    ImpressCMS ImpressCMS
  • High 7.1
    CVE-2019-25703

    ImpressCMS 1.3.11 SQL Injection via bid Parameter

    ImpressCMS 1.3.11 contains a time-based blind SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'bid' parameter. Attackers can send POST requests to the admin.php endpoint with mal…

    ImpressCMS ImpressCMS