CVE-2018-13983: Impresscms

Medium severity, CVSS 6.1. EPSS: 1.5% chance of exploitation in the next 30 days.

ImpressCMS 1.3.10 has XSS via the PATH_INFO to htdocs/install/index.php, htdocs/install/page_langselect.php, or htdocs/install/page_modcheck.php.

Affected products

• Impresscms Impresscms: version 1.3.10 only

Published 2019-05-06. Last modified 2026-06-17.