Login Request a demo
IN
Product
InstantCMS
by InstantCMS · last CVE Mar 9, 2026
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities21In the news0Timeline
Severity mix
Critical 2High 3Medium 15Low 1
Severity
All severities21Critical2High3Medium15Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add InstantCMS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-4655
6.1
0%
Aug 31
Cross-site Scripting (XSS) - Reflected in instantsoft/icms2
Affected: before 2.16.1
CVE-2018-14382
6.1
1%
Jul 18
InstantCMS 2.10.1 has /redirect?url= XSS
Affected: 2.10.1
CVE-2024-50348
5.4
0%
Oct 29
InstantCMS has a Cross Site Scripting Vulnerability
Affected: before 2.16.3
CVE-2024-31213
5.4
0%
Apr 5
InstantCMS Open Redirect vulnerability
Affected: before 2.16.2
CVE-2023-4878
5.4
0%
Sep 10
Server-Side Request Forgery (SSRF) in instantsoft/icms2
Affected: before 2.16.1
CVE-2023-4649
5.4
0%
Aug 31
Session Fixation in instantsoft/icms2
Affected: before 2.16.1
CVE-2023-4651
5.4
0%
Aug 31
Server-Side Request Forgery (SSRF) in instantsoft/icms2
Affected: before 2.16.1
CVE-2023-4652
5.4
1%
Aug 31
Cross-site Scripting (XSS) - Stored in instantsoft/icms2
Affected: before 2.16.1
CVE-2023-4704
4.9
1%
Sep 1
External Control of System or Configuration Setting in instantsoft/icms2
Affected: before 2.16.1
CVE-2023-4879
4.8
0%
Sep 10
Cross-site Scripting (XSS) - Stored in instantsoft/icms2
Affected: before 2.16.1
CVE-2023-4653
4.8
0%
Aug 31
Cross-site Scripting (XSS) - Stored in instantsoft/icms2
Affected: before 2.16.1
CVE-2023-4189
4.8
0%
Aug 5
Cross-site Scripting (XSS) - Reflected in instantsoft/icms2
Affected: before 2.16.1
CVE-2023-4187
4.8
0%
Aug 5
Cross-site Scripting (XSS) - Stored in instantsoft/icms2
Affected: before 2.16.1
CVE-2023-4650
4.7
1%
Aug 31
Improper Access Control in instantsoft/icms2
Affected: before 2.16.1
CVE-2023-4381
4.3
0%
Aug 16
Unverified Password Change in instantsoft/icms2
Affected: before 2.16.1
Showing 15