{"id":"GHSA-39vm-rvwh-q86j","aliases":["CVE-2010-4616"],"title":"ImpressCMS Cross-site Scripting vulnerability via quicksearch_ContentContent parameter","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"MODERATE","description":"Cross-site scripting (XSS) vulnerability in modules/content/admin/content.php in ImpressCMS 1.2.3 Final, and possibly other versions before 1.2.4, allows remote attackers to inject arbitrary web script or HTML via the quicksearch_ContentContent parameter.","severity":"medium","score":null,"published":"2022-05-14T02:42:14.000Z","modified":"2024-02-07T23:12:30.938Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"impresscms/impresscms","sources":[{"name":"OSV · GHSA-39vm-rvwh-q86j","url":"https://osv.dev/vulnerability/GHSA-39vm-rvwh-q86j"}],"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.2.4"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["1.2.4"]}],"sourceAffected":[],"references":["https://nvd.nist.gov/vuln/detail/CVE-2010-4616","https://github.com/ImpressCMS/impresscms","https://web.archive.org/web/20101223135531/http://secunia.com/advisories/42695","https://web.archive.org/web/20201209001614/http://www.securityfocus.com/archive/1/515397/100/0/threaded","http://community.impresscms.org/modules/smartsection/item.php?itemid=525","http://www.htbridge.ch/advisory/xss_vulnerability_in_impresscms.html"],"sources":[{"name":"OSV","id":"GHSA-39vm-rvwh-q86j","modified":"2024-02-07T23:12:30.938144Z","url":"https://osv.dev/vulnerability/GHSA-39vm-rvwh-q86j"}],"assessments":[],"products":[],"remediation":[],"kev":{"status":"not-listed","checkedAt":"2026-10-28T21:15:31.530Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}