CVE-2018-13983 - ImpressCMS 1.3.10 has XSS via the PATH_INFO to htdocs/install/index.php, htdocs/install/page_langselect.php, or htdocs/install/page_modcheck.php

MEDIUM

ImpressCMS 1.3.10 has XSS via the PATH_INFO to htdocs/install/index.php, htdocs/install/page_langselect.php, or htdocs/install/page_modcheck.php

Published May 6, 2019

6.1

MEDIUM

CVSS 3.0

EPSS 1.55%

ImpressCMS 1.3.10 has XSS via the PATH_INFO to htdocs/install/index.php, htdocs/install/page_langselect.php, or htdocs/install/page_modcheck.php.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
http://packetstormsecurity.com/files/150990/ImpressCMS-1.3.10-Cross-Site-Scripting.html		x_refsource_MISCExploitThird Party AdvisoryVDB Entry
http://seclists.org/fulldisclosure/2019/Jan/8		x_refsource_MISCMailing ListThird Party Advisory
https://github.com/advisories/GHSA-g32q-4fhf-cq72		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-13983
https://www.netsparker.com/web-applications-advisories/ns-18-033-cross-site-scripting-in-impresscms/		x_refsource_MISCExploitThird Party Advisory