Instantcms vulnerabilities

Products

• Instantcms 21
• Icms2 3

Newest

• instantcms, instantsoft icms2 +1 more InstantCMS has Multiple CSRF Vulnerabilities CVE-2026-28281 7.1 HighMarch 9, 2026
• instantcms, instantsoft icms2 +1 more InstantCMS vulnerable to Server-Side Request Forgery via package installer CVE-2025-59055 4.7 MediumSeptember 11, 2025
• instantcms InstantCMS <= 1.6 Remote PHP Code Execution CVE-2013-10051 Public exploit 9.3 CriticalAugust 1, 2025
• instantcms, instantcms icms2 +1 more InstantCMS has a Cross Site Scripting Vulnerability CVE-2024-50348 5.4 MediumOctober 29, 2024
• instantcms, instantsoft icms2 +1 more InstantCMS Open Redirect vulnerability CVE-2024-31213 3.5 LowApril 5, 2024
• instantcms, instantcms icms2 +1 more SQL injection in index_chart_data action CVE-2024-31212 6.7 MediumApril 4, 2024
• instantcms icms2, instantsoft instantsoft/icms2 +1 more SQL Injection in instantsoft/icms2 CVE-2023-4928 7.2 HighSeptember 13, 2023
• instantsoft instantsoft/icms2, instantcms +1 more Cross-site Scripting (XSS) - Stored in instantsoft/icms2 CVE-2023-4879 3.5 LowSeptember 10, 2023
• instantsoft instantsoft/icms2, instantcms +1 more Server-Side Request Forgery (SSRF) in instantsoft/icms2 CVE-2023-4878 4.3 MediumSeptember 10, 2023
• instantsoft instantsoft/icms2, instantcms +1 more External Control of System or Configuration Setting in instantsoft/icms2 CVE-2023-4704 8.8 HighSeptember 1, 2023
• instantsoft instantsoft/icms2, instantcms +1 more Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in instantsoft/icms2 CVE-2023-4654 2.6 LowAugust 31, 2023
• instantsoft instantsoft/icms2, instantcms +1 more Cross-site Scripting (XSS) - Reflected in instantsoft/icms2 CVE-2023-4655 4.3 MediumAugust 31, 2023
• instantsoft instantsoft/icms2, instantcms +1 more Cross-site Scripting (XSS) - Stored in instantsoft/icms2 CVE-2023-4653 5.9 MediumAugust 31, 2023
• instantsoft instantsoft/icms2, instantcms +1 more Cross-site Scripting (XSS) - Stored in instantsoft/icms2 CVE-2023-4652 6.8 MediumAugust 31, 2023
• instantsoft instantsoft/icms2, instantcms +1 more Server-Side Request Forgery (SSRF) in instantsoft/icms2 CVE-2023-4651 6.4 MediumAugust 31, 2023
• instantsoft instantsoft/icms2, instantcms +1 more Improper Access Control in instantsoft/icms2 CVE-2023-4650 4.7 MediumAugust 31, 2023
• instantsoft instantsoft/icms2, instantcms +1 more Session Fixation in instantsoft/icms2 CVE-2023-4649 4.3 MediumAugust 31, 2023
• instantsoft instantsoft/icms2, instantcms +1 more Unverified Password Change in instantsoft/icms2 CVE-2023-4381 4.3 MediumAugust 16, 2023
• instantsoft instantsoft/icms2, instantcms +1 more Cross-site Scripting (XSS) - Reflected in instantsoft/icms2 CVE-2023-4189 4.8 MediumAugust 5, 2023
• instantsoft instantsoft/icms2, instantcms +1 more SQL Injection in instantsoft/icms2 CVE-2023-4188 9.8 CriticalAugust 5, 2023
• instantsoft instantsoft/icms2, instantcms +1 more Cross-site Scripting (XSS) - Stored in instantsoft/icms2 CVE-2023-4187 3.5 LowAugust 5, 2023
• instantcms InstantCMS 2.10.1 has /redirect?url= XSS. CVE-2018-14382 6.1 MediumJuly 18, 2018