IN
Vendor
instantsoft
30
CVEs
0
On KEV
3
New 30D
Products
IC7.2
icms2
instantsoft
10 CVEs0 on KEV3 new
IN9.1
instantsoft/icms2
instantsoft
15 CVEs0 on KEV0 new
IN9.1
Instantcms
Instantsoft
5 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-108568 | IC icms2 InstantSoft | 4.3 | Oct 11 | InstantSoft icms2 Billing paypal.php validatePaypalOrder data authenticity |
| CVE-2026-108567 | IC icms2 InstantSoft | 4.3 | Oct 11 | InstantSoft icms2 Image image.php files_delete_file path traversal |
| CVE-2026-108566 | IC icms2 InstantSoft | 3.5 | Oct 11 | InstantSoft icms2 Private Message index.tpl.php index cross site scripting |
| CVE-2026-48707 | IC icms2 instantsoft | 3.1 | Sep 8 | InstantCMS vulnerable to SSRF via upload redirect bypass allows internal network service scanning |
| CVE-2026-54611 | IC icms2 instantsoft | 5.5 | Sep 8 | InstantCMS has Remote Code Execution in package installer |
| CVE-2026-28281 | IC icms2 instantsoft | 7.1 | Mar 9 | InstantCMS has Multiple CSRF Vulnerabilities |
| CVE-2025-59055 | IC icms2 instantsoft | 7.2 | Sep 11 | InstantCMS vulnerable to Server-Side Request Forgery via package installer |
| CVE-2024-50348 | IC icms2 instantsoft | 5.4 | Oct 29 | InstantCMS has a Cross Site Scripting Vulnerability |
| CVE-2024-31213 | IC icms2 instantsoft | 5.4 | Apr 5 | InstantCMS Open Redirect vulnerability |
| CVE-2024-31212 | IC icms2 instantsoft | 7.2 | Apr 4 | SQL injection in index_chart_data action |
| CVE-2023-4928 | IN instantsoft/icms2 instantsoft | 7.2 | Sep 13 | SQL Injection in instantsoft/icms2 |
| CVE-2023-4879 | IN instantsoft/icms2 instantsoft | 4.8 | Sep 10 | Cross-site Scripting (XSS) - Stored in instantsoft/icms2 |
| CVE-2023-4878 | IN instantsoft/icms2 instantsoft | 5.4 | Sep 10 | Server-Side Request Forgery (SSRF) in instantsoft/icms2 |
| CVE-2023-4704 | IN instantsoft/icms2 instantsoft | 4.9 | Sep 1 | External Control of System or Configuration Setting in instantsoft/icms2 |
| CVE-2023-4654 | IN instantsoft/icms2 instantsoft | 3.5 | Aug 31 | Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in instantsoft/icms2 |
| CVE-2023-4655 | IN instantsoft/icms2 instantsoft | 6.1 | Aug 31 | Cross-site Scripting (XSS) - Reflected in instantsoft/icms2 |
| CVE-2023-4650 | IN instantsoft/icms2 instantsoft | 4.7 | Aug 31 | Improper Access Control in instantsoft/icms2 |
| CVE-2023-4649 | IN instantsoft/icms2 instantsoft | 5.4 | Aug 31 | Session Fixation in instantsoft/icms2 |
| CVE-2023-4651 | IN instantsoft/icms2 instantsoft | 5.4 | Aug 31 | Server-Side Request Forgery (SSRF) in instantsoft/icms2 |
| CVE-2023-4653 | IN instantsoft/icms2 instantsoft | 4.8 | Aug 31 | Cross-site Scripting (XSS) - Stored in instantsoft/icms2 |
| CVE-2023-4652 | IN instantsoft/icms2 instantsoft | 5.4 | Aug 31 | Cross-site Scripting (XSS) - Stored in instantsoft/icms2 |
| CVE-2023-4381 | IN instantsoft/icms2 instantsoft | 4.3 | Aug 16 | Unverified Password Change in instantsoft/icms2 |
| CVE-2023-4189 | IN instantsoft/icms2 instantsoft | 4.8 | Aug 5 | Cross-site Scripting (XSS) - Reflected in instantsoft/icms2 |
| CVE-2023-4188 | IN instantsoft/icms2 instantsoft | 9.1 | Aug 5 | SQL Injection in instantsoft/icms2 |
| CVE-2023-4187 | IN instantsoft/icms2 instantsoft | 4.8 | Aug 5 | Cross-site Scripting (XSS) - Stored in instantsoft/icms2 |
| CVE-2013-6839 | IN Instantcms Instantsoft | – | Dec 13 | SQL injection vulnerability in InstantSoft InstantCMS 1.10.3 and earlier allows remote attackers to execute arbitrary SQL commands via the orderby parameter to catalog/[id] |