CyberRota Analysis
AI-GeneratedImpressCMS is vulnerable due to an authenticated remote code execution flaw in its custom tag module, which allows authenticated administrators to execute arbitrary PHP code by injecting malicious payloads. The vulnerability arises from improper sanitization of HTML-encoded content, enabling attackers to bypass security measures and trigger the payload on every frontend page load. Organizations using ImpressCMS, particularly those with multiple administrators, should prioritize patching this vulnerability to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
ImpressCMS contains an authenticated remote code execution vulnerability in the custom tag module that allows authenticated administrators to execute arbitrary PHP code by storing a malicious payload in a custom tag with PHP type enabled. The application decodes HTML-encoded content via undoHtmlSpecialChars() before passing it to eval() in the renderWithPhp() method, bypassing HTML Purifier sanitization, and the payload is triggered on every frontend page load through the preload event system.