ImpressPages 1.0.4 and earlier versions have security related issue. In administration area exist MySQL injection vulnerability.

This issue can be exploit only if you have administrator login.
So, you don't need to worry about users and hackers from outside of your website. ImpressPages is really secure. Guys from High-Tech Bridge Security Advisories (http://www.htbridge.ch) found only these tiny holes that are easy to fix.

Nevertheless, if you have administrators with limited access, use this fix and sleep well. We will include this fix in next release. It's up to you to do it now or wait for update.