Instantsoft Icms2 vulnerabilities

• instantsoft icms2 InstantSoft icms2 Billing paypal.php validatePaypalOrder data authenticity CVE-2026-108568 5.3 MediumOctober 11, 2026
• instantsoft icms2 InstantSoft icms2 Image image.php files_delete_file path traversal CVE-2026-108567 5.3 MediumOctober 11, 2026
• instantsoft icms2 InstantSoft icms2 Private Message index.tpl.php index cross site scripting CVE-2026-108566 5.1 MediumOctober 11, 2026
• instantsoft icms2 InstantCMS vulnerable to SSRF via upload redirect bypass allows internal network service scanning CVE-2026-48707 3.1 LowSeptember 8, 2026
• instantsoft icms2 InstantCMS has Remote Code Execution in package installer CVE-2026-54611 5.5 MediumSeptember 8, 2026
• instantcms, instantsoft icms2 +1 more InstantCMS has Multiple CSRF Vulnerabilities CVE-2026-28281 7.1 HighMarch 9, 2026
• instantcms, instantsoft icms2 +1 more InstantCMS vulnerable to Server-Side Request Forgery via package installer CVE-2025-59055 4.7 MediumSeptember 11, 2025
• instantcms, instantcms icms2 +1 more InstantCMS has a Cross Site Scripting Vulnerability CVE-2024-50348 5.4 MediumOctober 29, 2024
• instantcms, instantsoft icms2 +1 more InstantCMS Open Redirect vulnerability CVE-2024-31213 3.5 LowApril 5, 2024
• instantcms, instantcms icms2 +1 more SQL injection in index_chart_data action CVE-2024-31212 6.7 MediumApril 4, 2024
• instantcms icms2, instantsoft instantsoft/icms2 +1 more SQL Injection in instantsoft/icms2 CVE-2023-4928 7.2 HighSeptember 13, 2023
• instantsoft instantsoft/icms2, instantcms +1 more Cross-site Scripting (XSS) - Stored in instantsoft/icms2 CVE-2023-4879 3.5 LowSeptember 10, 2023
• instantsoft instantsoft/icms2, instantcms +1 more Server-Side Request Forgery (SSRF) in instantsoft/icms2 CVE-2023-4878 4.3 MediumSeptember 10, 2023
• instantsoft instantsoft/icms2, instantcms +1 more External Control of System or Configuration Setting in instantsoft/icms2 CVE-2023-4704 8.8 HighSeptember 1, 2023
• instantsoft instantsoft/icms2, instantcms +1 more Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in instantsoft/icms2 CVE-2023-4654 2.6 LowAugust 31, 2023
• instantsoft instantsoft/icms2, instantcms +1 more Cross-site Scripting (XSS) - Reflected in instantsoft/icms2 CVE-2023-4655 4.3 MediumAugust 31, 2023
• instantsoft instantsoft/icms2, instantcms +1 more Cross-site Scripting (XSS) - Stored in instantsoft/icms2 CVE-2023-4653 5.9 MediumAugust 31, 2023
• instantsoft instantsoft/icms2, instantcms +1 more Cross-site Scripting (XSS) - Stored in instantsoft/icms2 CVE-2023-4652 6.8 MediumAugust 31, 2023
• instantsoft instantsoft/icms2, instantcms +1 more Server-Side Request Forgery (SSRF) in instantsoft/icms2 CVE-2023-4651 6.4 MediumAugust 31, 2023
• instantsoft instantsoft/icms2, instantcms +1 more Improper Access Control in instantsoft/icms2 CVE-2023-4650 4.7 MediumAugust 31, 2023
• instantsoft instantsoft/icms2, instantcms +1 more Session Fixation in instantsoft/icms2 CVE-2023-4649 4.3 MediumAugust 31, 2023
• instantsoft instantsoft/icms2, instantcms +1 more Unverified Password Change in instantsoft/icms2 CVE-2023-4381 4.3 MediumAugust 16, 2023
• instantsoft instantsoft/icms2, instantcms +1 more Cross-site Scripting (XSS) - Reflected in instantsoft/icms2 CVE-2023-4189 4.8 MediumAugust 5, 2023
• instantsoft instantsoft/icms2, instantcms +1 more SQL Injection in instantsoft/icms2 CVE-2023-4188 9.8 CriticalAugust 5, 2023
• instantsoft instantsoft/icms2, instantcms +1 more Cross-site Scripting (XSS) - Stored in instantsoft/icms2 CVE-2023-4187 3.5 LowAugust 5, 2023