Skip to content
OpenAdvisories

Product · instantsoft

icms2

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-28281

    InstantCMS has Multiple CSRF Vulnerabilities

    InstantCMS is a free and open source content management system. Prior to 2.18.1, InstantCMS does not validate CSRF tokens, which allows attackers grant moderator privileges to users, execute scheduled tasks, move posts to trash, and accept friend requests on …

    instantsoft icms2