ImpressCMS vulnerabilities

CVEs whose affected-version data names the ImpressCMS package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-73679High· 7.2

1mo ago

ImpressCMS Authenticated RCE via PHP Custom Tag eval()

ImpressCMS contains an authenticated remote code execution vulnerability in the custom tag module that allows authenticated administrators to execute arbitrary PHP code by storing a malicious payload in a custom tag with PHP type enabled…

▾ TwilightImpressCMS · ImpressCMSEPSS 0.61%via CVEORG