CVE-2021-3018: Ipeak Ipeakcms

Critical severity, CVSS 9.8. EPSS: 18.6% chance of exploitation in the next 30 days.

ipeak Infosystems ibexwebCMS (aka IPeakCMS) 3.5 is vulnerable to an unauthenticated Boolean-based SQL injection via the id parameter on the /cms/print.php page.

Affected products

• Ipeak Ipeakcms: version 3.5 only

Published 2021-01-05. Last modified 2026-06-17.