Imperia CMS SiteActive TEMPLATE … | RCE Security
www.rcesecurity.com
CVE-2026-110355: Unauthenticated SSTI in Imperia CMS 11.7.2 and earlier enables remote code execution via SiteActive's TEMPLATE parameter when PHP is available.