CVE-2021-26599: Impresscms

Critical severity, CVSS 9.8. EPSS: 21% chance of exploitation in the next 30 days.

ImpressCMS before 1.4.3 allows include/findusers.php groups SQL Injection.

Affected products

• Impresscms Impresscms: before 1.4.4 (fixed in 1.4.4)

Published 2022-03-28. Last modified 2026-06-17.