Only the latest released version of ImpressCMS is supported. The previous major release receives support for 6 months after a new major release has been made available
To facilitate upgrades we almost never make backwards-incompatible changes within a major release itself.
Please report vulnerabilities on our website at https://www.impresscms.org/modules/ccenter/?form=5