ImpressCMS · Report #1049040
Download full backup and Cross site scripting
Validstatus
highseverity
14upvotes
6 Dec 2020disclosed
Summary
A backup zip file was still left on the server, which was removed. Moreover, an old unused content editor was still left and could be used by a malicious user. The unused editor has been removed as well.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.