What’s Vulnerable › Vulnerabilities

CVE-2021-4270: Imprint CMS ViewHelpers.cs SearchForm cross site scripting

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-12-21 · updated 2026-06-17
• Weakness: CWE-707

Description

A vulnerability was found in Imprint CMS. It has been classified as problematic. Affected is the function SearchForm of the file ImprintCMS/Models/ViewHelpers.cs. The manipulation of the argument query leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is 6140b140ccd02b5e4e7d6ba013ac1225724487f4. It is recommended to apply a patch to fix this issue. VDB-216474 is the identifier assigned to this vulnerability.

Affected products

• Imprint CMS: before 2021-04-09 — fixed in 2021-04-09

How to fix

Upgrade to a fixed version: Imprint CMS 2021-04-09. Check the vendor advisory for mitigations.

References

• https://github.com/peders/Imprint-CMS/commit/6140b140ccd02b5e4e7d6ba013ac1225724487f4
• https://vuldb.com/?id.216474
• https://github.com/peders/Imprint-CMS/commit/6140b140ccd02b5e4e7d6ba013ac1225724487f4
• https://vuldb.com/?id.216474

Get alerted when CVE-2021-4270 or the next vulnerability affects your stack