CVE-2018-13983: XSS

Q: What is CVE-2018-13983?

CVE-2018-13983 is a vulnerability in ImpressCMS 1.3.10 that allows cross-site scripting (XSS) attacks.

Q: How severe is CVE-2018-13983?

CVE-2018-13983 has a severity rating of 6.1, which is considered medium.

Q: How does CVE-2018-13983 occur?

CVE-2018-13983 occurs due to improper validation of user-supplied input in certain pages of ImpressCMS.

Q: What is the impact of CVE-2018-13983?

The impact of CVE-2018-13983 is that it allows attackers to execute malicious code or steal sensitive information from users.

Q: How can I mitigate CVE-2018-13983?

To mitigate CVE-2018-13983, it is recommended to update to a patched version of ImpressCMS.

Published May 6, 2019

Updated

ImpressCMS 1.3.10 has XSS via the PATHINFO to htdocs/install/index.php, htdocs/install/pagelangselect.php, or htdocs/install/pagemodcheck.php.

Other sources

ImpressCMS 1.3.10 has XSS via the PATHINFO to htdocs/install/index.php, htdocs/install/pagelangselect.php, or htdocs/install/pagemodcheck.php.

Affected Software

2 affected components

composer/impresscms/impresscms<=1.3.10

ImpressCMS ImpressCMS=1.3.10

Event History

May 6, 2019

CVE Published

via MITRE·06:20 PM

Data Sourced

via MITRE·06:20 PM

Description

May 24, 2022

Advisory Published

04:45 PM

Frequently Asked Questions

What is CVE-2018-13983?

CVE-2018-13983 is a vulnerability in ImpressCMS 1.3.10 that allows cross-site scripting (XSS) attacks.

How severe is CVE-2018-13983?

CVE-2018-13983 has a severity rating of 6.1, which is considered medium.

How does CVE-2018-13983 occur?

CVE-2018-13983 occurs due to improper validation of user-supplied input in certain pages of ImpressCMS.

What is the impact of CVE-2018-13983?