Sploitus

18 exploited vulnerabilities in Impresscms

Vulnerabilities with publicly known exploits

Vendors
Ckeditor, Unknown, Php, Impresscms, Git
With known exploits
18
Affected Impresscms versions
< 1.4.2, 1.4.4, 1.4.3, 1.3.11, 1.3.5, 1.3.10, 1.2, 1.2.1, 1.2.3, 1.2.4, 1.2.5, 1.2.6, 1.3, 1.4.5, 1.4.0, 1.3.6.1, 1.0, 1.1, 1.1.1, 1.1.2, 1.1.3

Vulnerabilities with exploits

Highest CVSS first — 8 of these already have exploit code on Sploitus

CVE-2022-24977
CVSS 10.0 CRITICAL 2022-02-13FIX AVAILABLE
CVE-2022-50912
CVSS 9.8 CRITICAL 2026-01-13FIX AVAILABLE
CVE-2021-26600 2 exploits
CVSS 9.8 CRITICAL 2022-03-25FIX AVAILABLE
ImpressCMS 1.4.2 Authentication Bypass VulnerabilityImpressCMS 1.4.2 Authentication Bypass
CVE-2021-26599 5 exploits
CVSS 9.8 CRITICAL 2022-03-25FIX AVAILABLE
ImpressCMS 1.4.2 - Remote Code Execution ExploitImpressCMS 1.4.2 - Remote Code Execution (RCE)
CVE-2021-47938
CVSS 8.8 HIGH 2026-05-10
CVE-2019-25703
CVSS 8.8 HIGH 2026-04-12
CVE-2022-26986 3 exploits
CVSS 8.5 HIGH 2022-04-05FIX AVAILABLE
ImpressCMS v1.4.3 - Authenticated SQL Injection VulnerabilityImpressCMS 1.4.3 SQL Injection
CVE-2021-26601 2 exploits
CVSS 8.1 HIGH 2022-03-25FIX AVAILABLE
ImpressCMS 1.4.2 Path Traversal VulnerabilityImpressCMS 1.4.2 Path Traversal
CVE-2014-1836 3 exploits
CVSS 6.4 MEDIUM 2015-07-01FIX AVAILABLE
ImpressCMS 1.3.5 - Multiple VulnerabilitiesImpressCMS 1.3.5 - Multiple Vulnerabilities
CVE-2018-13983 1 exploit
CVSS 6.1 MEDIUM 2019-05-06
ImpressCMS 1.3.10 Cross Site Scripting
CVE-2012-0987 1 exploit
CVSS 6.0 MEDIUM 2012-10-06FIX AVAILABLE
Impresscms LFI
CVE-2021-28088
CVSS 5.4 MEDIUM 2021-03-11
CVE-2021-26598 5 exploits
CVSS 5.3 MEDIUM 2022-03-25FIX AVAILABLE
ImpressCMS 1.4.2 - Remote Code Execution ExploitImpressCMS 1.4.2 - Remote Code Execution (RCE)
CVE-2023-37785
CVSS 4.8 MEDIUM 2023-07-13
CVE-2020-17551
CVSS 4.8 MEDIUM 2020-10-07FIX AVAILABLE
CVE-2014-4036
CVSS 4.3 MEDIUM 2014-06-11FIX AVAILABLE
CVE-2012-0986
CVSS 4.3 MEDIUM 2012-10-06FIX AVAILABLE
CVE-2010-4616
CVSS 4.3 MEDIUM 2010-12-29FIX AVAILABLE