Skip to content
OpenAdvisories

Product · instantsoft

instantsoft/icms2

15 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 4.3
    CVE-2023-4878

    Server-Side Request Forgery (SSRF) in instantsoft/icms2

    Server-Side Request Forgery (SSRF) in GitHub repository instantsoft/icms2 prior to 2.16.1-git.

    instantsoft instantsoft/icms2
  • Medium 4.3
    CVE-2023-4655

    Cross-site Scripting (XSS) - Reflected in instantsoft/icms2

    Cross-site Scripting (XSS) - Reflected in GitHub repository instantsoft/icms2 prior to 2.16.1.

    instantsoft instantsoft/icms2
  • Medium 6.4
    CVE-2023-4651

    Server-Side Request Forgery (SSRF) in instantsoft/icms2

    Server-Side Request Forgery (SSRF) in GitHub repository instantsoft/icms2 prior to 2.16.1.

    instantsoft instantsoft/icms2
  • Medium 4.7
    CVE-2023-4650

    Improper Access Control in instantsoft/icms2

    Improper Access Control in GitHub repository instantsoft/icms2 prior to 2.16.1-git.

    instantsoft instantsoft/icms2
  • Medium 6.8
    CVE-2023-4652

    Cross-site Scripting (XSS) - Stored in instantsoft/icms2

    Cross-site Scripting (XSS) - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1-git.

    instantsoft instantsoft/icms2
  • Medium 4.3
    CVE-2023-4649

    Session Fixation in instantsoft/icms2

    Session Fixation in GitHub repository instantsoft/icms2 prior to 2.16.1.

    instantsoft instantsoft/icms2
  • Medium 5.9
    CVE-2023-4653

    Cross-site Scripting (XSS) - Stored in instantsoft/icms2

    Cross-site Scripting (XSS) - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1-git.

    instantsoft instantsoft/icms2
  • Medium 4.3
    CVE-2023-4381

    Unverified Password Change in instantsoft/icms2

    Unverified Password Change in GitHub repository instantsoft/icms2 prior to 2.16.1-git.

    instantsoft instantsoft/icms2
  • Medium 4.8
    CVE-2023-4189

    Cross-site Scripting (XSS) - Reflected in instantsoft/icms2

    Cross-site Scripting (XSS) - Reflected in GitHub repository instantsoft/icms2 prior to 2.16.1-git.

    instantsoft instantsoft/icms2