Eval injection vulnerability in ip_cms/modules/standard/content_management/actions.php in ImpressPages CMS 1.0.12 and possibly other versons before 1.0.13 allows remote attackers to execute arbitrary code via the cm_group parameter.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| impresspages/impresspages(Packagist) | 0 | 1.0.13 | N/A |
CVSS Metrics