IC
Product
icms2
10
CVEs
0
On KEV
7.2
Max CVSS
3
New 30D
Severity mix
Critical 0High 3Medium 5Low 2
Watch
Add icms2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-54611 | 5.5 | Sep 8 | InstantCMS has Remote Code Execution in package installer Affected: < 2.18.2 |
| CVE-2024-50348 | 5.4 | Oct 29 | InstantCMS has a Cross Site Scripting Vulnerability Affected: < 2.16.3 |
| CVE-2024-31213 | 5.4 | Apr 5 | InstantCMS Open Redirect vulnerability Affected: < 2.16.2 |
| CVE-2026-108568 | 4.3 | Oct 11 | InstantSoft icms2 Billing paypal.php validatePaypalOrder data authenticity Affected: 2.18.0; 2.18.1; 2.18.2 |
| CVE-2026-108567 | 4.3 | Oct 11 | InstantSoft icms2 Image image.php files_delete_file path traversal Affected: 2.18.0; 2.18.1; 2.18.2 |
Showing 5