CVE-2021-26601: Impresscms

High severity, CVSS 8.1. EPSS: 3.2% chance of exploitation in the next 30 days.

ImpressCMS before 1.4.3 allows libraries/image-editor/image-edit.php image_temp Directory Traversal.

Affected products

• Impresscms Impresscms: before 1.4.3 (fixed in 1.4.3)

Published 2022-03-28. Last modified 2026-06-17.