Moderate severityNVD Advisory· Published Dec 29, 2010· Updated Apr 29, 2026
CVE-2010-4616
CVE-2010-4616
Description
Cross-site scripting (XSS) vulnerability in modules/content/admin/content.php in ImpressCMS 1.2.3 Final, and possibly other versions before 1.2.4, allows remote attackers to inject arbitrary web script or HTML via the quicksearch_ContentContent parameter.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
impresscms/impresscmsPackagist | < 1.2.4 | 1.2.4 |
Affected products
35cpe:2.3:a:impresscms:impresscms:1.0:beta1:*:*:*:*:*:*+ 34 more
- cpe:2.3:a:impresscms:impresscms:1.0:beta1:*:*:*:*:*:*
- cpe:2.3:a:impresscms:impresscms:1.0:beta2:*:*:*:*:*:*
- cpe:2.3:a:impresscms:impresscms:1.0:final:*:*:*:*:*:*
- cpe:2.3:a:impresscms:impresscms:1.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:impresscms:impresscms:1.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:impresscms:impresscms:1.0:rc3:*:*:*:*:*:*
- cpe:2.3:a:impresscms:impresscms:1.1.1:final:*:*:*:*:*:*
- cpe:2.3:a:impresscms:impresscms:1.1.1:rc1:*:*:*:*:*:*
- cpe:2.3:a:impresscms:impresscms:1.1.1:rc2:*:*:*:*:*:*
- cpe:2.3:a:impresscms:impresscms:1.1.2:final:*:*:*:*:*:*
- cpe:2.3:a:impresscms:impresscms:1.1.2:rc1:*:*:*:*:*:*
- cpe:2.3:a:impresscms:impresscms:1.1.2:rc2:*:*:*:*:*:*
- cpe:2.3:a:impresscms:impresscms:1.1.3:beta:*:*:*:*:*:*
- cpe:2.3:a:impresscms:impresscms:1.1.3:final:*:*:*:*:*:*
- cpe:2.3:a:impresscms:impresscms:1.1.3:rc1:*:*:*:*:*:*
- cpe:2.3:a:impresscms:impresscms:1.1:alpha1:*:*:*:*:*:*
- cpe:2.3:a:impresscms:impresscms:1.1:alpha2:*:*:*:*:*:*
- cpe:2.3:a:impresscms:impresscms:1.1:beta1:*:*:*:*:*:*
- cpe:2.3:a:impresscms:impresscms:1.1:final:*:*:*:*:*:*
- cpe:2.3:a:impresscms:impresscms:1.1:rc1:*:*:*:*:*:*
- cpe:2.3:a:impresscms:impresscms:1.1:rc2:*:*:*:*:*:*
- cpe:2.3:a:impresscms:impresscms:1.1:rc3:*:*:*:*:*:*
- cpe:2.3:a:impresscms:impresscms:1.2.1:beta:*:*:*:*:*:*
- cpe:2.3:a:impresscms:impresscms:1.2.1:final:*:*:*:*:*:*
- cpe:2.3:a:impresscms:impresscms:1.2.1:rc1:*:*:*:*:*:*
- cpe:2.3:a:impresscms:impresscms:1.2.3:beta:*:*:*:*:*:*
- cpe:2.3:a:impresscms:impresscms:1.2.3:rc1:*:*:*:*:*:*
- cpe:2.3:a:impresscms:impresscms:1.2.3:rc2:*:*:*:*:*:*
- cpe:2.3:a:impresscms:impresscms:1.2:alpha1:*:*:*:*:*:*
- cpe:2.3:a:impresscms:impresscms:1.2:alpha2:*:*:*:*:*:*
- cpe:2.3:a:impresscms:impresscms:1.2:beta:*:*:*:*:*:*
- cpe:2.3:a:impresscms:impresscms:1.2:final:*:*:*:*:*:*
- cpe:2.3:a:impresscms:impresscms:1.2:rc1:*:*:*:*:*:*
- cpe:2.3:a:impresscms:impresscms:1.2:rc2:*:*:*:*:*:*
- cpe:2.3:a:impresscms:impresscms:*:final:*:*:*:*:*:*range: <=1.2.3
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
8- community.impresscms.org/modules/smartsection/item.phpnvdPatchWEB
- www.htbridge.ch/advisory/xss_vulnerability_in_impresscms.htmlnvdExploitWEB
- secunia.com/advisories/42695nvdVendor Advisory
- github.com/advisories/GHSA-39vm-rvwh-q86jghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2010-4616ghsaADVISORY
- web.archive.org/web/20101223135531/http://secunia.com/advisories/42695ghsaWEB
- web.archive.org/web/20201209001614/http://www.securityfocus.com/archive/1/515397/100/0/threadedghsaWEB
- www.securityfocus.com/archive/1/515397/100/0/threadednvd
News mentions
0No linked articles in our index yet.