Instantcms CVEs and Security Vulnerabilities

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2023-4189

Cross-site Scripting (XSS) - Reflected in instantsoft/icms2

Cross-site Scripting (XSS) - Reflected in GitHub repository instantsoft/icms2 prior to 2.16.1-git.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Instantcms Instantsoft

Products

Instantcms Instantcms

CVE-2023-4188

SQL Injection in instantsoft/icms2

SQL Injection in GitHub repository instantsoft/icms2 prior to 2.16.1-git.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed

Vendors

Instantcms Instantsoft

Products

Instantcms Instantcms

CVE-2023-4187

Cross-site Scripting (XSS) - Stored in instantsoft/icms2

Cross-site Scripting (XSS) - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1-git.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Instantcms Instantsoft

Products

Instantcms Instantcms

CVE-2018-14382

InstantCMS 2.10.1 has /redirect?url= XSS.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Instantcms

Products

Instantcms

CVE-2024-50348

InstantCMS has a Cross Site Scripting Vulnerability

InstantCMS is a free and open source content management system. In photo upload function in the photo album page there is no input validation taking place. Due to this attackers are able to inject the XSS (Cross Site Scripting) payload and execute. This vulnerability is fixed in 2.16.3.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Instantcms

Products

Icms2 Instantcms

« first previous Page 2 of 2.