Skip to content
OpenAdvisories

Vendor

instantsoft

25 known vulnerabilities.

Products

instantsoft/icms2 15 icms2 10
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.1
    CVE-2026-28281

    InstantCMS has Multiple CSRF Vulnerabilities

    InstantCMS is a free and open source content management system. Prior to 2.18.1, InstantCMS does not validate CSRF tokens, which allows attackers grant moderator privileges to users, execute scheduled tasks, move posts to trash, and accept friend requests on …

    instantsoft icms2
  • High 7.2
    CVE-2023-4928

    SQL Injection in instantsoft/icms2

    SQL Injection in GitHub repository instantsoft/icms2 prior to 2.16.1.

    instantsoft instantsoft/icms2
  • High 8.8
    CVE-2023-4704

    External Control of System or Configuration Setting in instantsoft/icms2

    External Control of System or Configuration Setting in GitHub repository instantsoft/icms2 prior to 2.16.1-git.

    instantsoft instantsoft/icms2