IInstantSoft

Products

Exploited and recent CVEs

• CVE-2026-108568 Medium 4.3 InstantSoft icms2 Billing paypal.php validatePaypalOrder data authenticity 0.1%
• CVE-2026-108567 Medium 4.3 InstantSoft icms2 Image image.php files_delete_file path traversal 0.4%
• CVE-2026-108566 Low 3.5 InstantSoft icms2 Private Message index.tpl.php index cross site scripting 0.2%
• CVE-2026-48707 Low 3.1 InstantCMS vulnerable to SSRF via upload redirect bypass allows internal network service scanning 0.3%
• CVE-2026-54611 Medium 5.5 InstantCMS has Remote Code Execution in package installer 0.7%
• CVE-2026-28281 High 7.1 InstantCMS has Multiple CSRF Vulnerabilities 0.2%
• CVE-2025-59055 Medium 4.7 InstantCMS vulnerable to Server-Side Request Forgery via package installer 0.5%
• CVE-2024-50348 Medium 5.4 InstantCMS has a Cross Site Scripting Vulnerability 0.3%
• CVE-2024-31213 Low 3.5 InstantCMS Open Redirect vulnerability 0.4%
• CVE-2024-31212 Medium 6.7 SQL injection in index_chart_data action 0.9%
• CVE-2023-4928 High 7.2 SQL Injection in instantsoft/icms2 0.9%
• CVE-2023-4879 Low 3.5 Cross-site Scripting (XSS) - Stored in instantsoft/icms2 0.4%
• CVE-2023-4878 Medium 4.3 Server-Side Request Forgery (SSRF) in instantsoft/icms2 0.4%
• CVE-2023-4704 High 8.8 External Control of System or Configuration Setting in instantsoft/icms2 0.9%
• CVE-2023-4654 Low 2.6 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in instantsoft/icms2 0.3%
• CVE-2023-4655 Medium 4.3 Cross-site Scripting (XSS) - Reflected in instantsoft/icms2 0.5%
• CVE-2023-4650 Medium 4.7 Improper Access Control in instantsoft/icms2 0.5%
• CVE-2023-4649 Medium 4.3 Session Fixation in instantsoft/icms2 0.4%
• CVE-2023-4651 Medium 6.4 Server-Side Request Forgery (SSRF) in instantsoft/icms2 0.4%
• CVE-2023-4653 Medium 5.9 Cross-site Scripting (XSS) - Stored in instantsoft/icms2 0.5%
• CVE-2023-4652 Medium 6.8 Cross-site Scripting (XSS) - Stored in instantsoft/icms2 0.5%
• CVE-2023-4381 Medium 4.3 Unverified Password Change in instantsoft/icms2 0.4%
• CVE-2023-4189 Medium 4.8 Cross-site Scripting (XSS) - Reflected in instantsoft/icms2 0.5%
• CVE-2023-4188 Critical 9.8 SQL Injection in instantsoft/icms2 0.9%
• CVE-2023-4187 Low 3.5 Cross-site Scripting (XSS) - Stored in instantsoft/icms2 0.5%