InstantSoft icms2

• CVE-2026-108568 Medium 4.3 InstantSoft icms2 Billing paypal.php validatePaypalOrder data authenticity 0.1%
• CVE-2026-108567 Medium 4.3 InstantSoft icms2 Image image.php files_delete_file path traversal 0.4%
• CVE-2026-108566 Low 3.5 InstantSoft icms2 Private Message index.tpl.php index cross site scripting 0.2%
• CVE-2026-48707 Low 3.1 InstantCMS vulnerable to SSRF via upload redirect bypass allows internal network service scanning 0.3%
• CVE-2026-54611 Medium 5.5 InstantCMS has Remote Code Execution in package installer 0.7%
• CVE-2026-28281 High 7.1 InstantCMS has Multiple CSRF Vulnerabilities 0.2%
• CVE-2025-59055 Medium 4.7 InstantCMS vulnerable to Server-Side Request Forgery via package installer 0.5%
• CVE-2024-50348 Medium 5.4 InstantCMS has a Cross Site Scripting Vulnerability 0.3%
• CVE-2024-31213 Low 3.5 InstantCMS Open Redirect vulnerability 0.4%
• CVE-2024-31212 Medium 6.7 SQL injection in index_chart_data action 0.9%