instantsoft icms2 vulnerabilities

CVEs per yearBy the year they were published

1. 20243
2. 20251
3. 20266

Newest CVEs

• CVE-2026-108568

  InstantSoft icms2 Billing paypal.php validatePaypalOrder data authenticity

  InstantSoft · icms2

  Medium5.3
• CVE-2026-108567

  InstantSoft icms2 Image image.php files_delete_file path traversal

  InstantSoft · icms2

  Medium5.3
• CVE-2026-108566

  InstantSoft icms2 Private Message index.tpl.php index cross site scripting

  InstantSoft · icms2

  Medium5.1
• CVE-2026-48707

  InstantCMS vulnerable to SSRF via upload redirect bypass allows internal network service scanning

  instantsoft · icms2

  Low3.1
• CVE-2026-54611

  InstantCMS has Remote Code Execution in package installer

  instantsoft · icms2

  Medium5.5
• CVE-2026-28281

  InstantCMS has Multiple CSRF Vulnerabilities

  instantsoft · icms2

  High7.1
• CVE-2025-59055

  InstantCMS vulnerable to Server-Side Request Forgery via package installer

  instantsoft · icms2

  Medium4.7
• CVE-2024-50348

  InstantCMS has a Cross Site Scripting Vulnerability

  instantsoft · icms2

  Medium5.4
• CVE-2024-31213

  InstantCMS Open Redirect vulnerability

  instantsoft · icms2

  Low3.5
• CVE-2024-31212

  SQL injection in index_chart_data action

  instantsoft · icms2

  Medium6.7