What’s Vulnerable › Products

iCMS vulnerabilities

30 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your iCMS version is affected

Latest iCMS vulnerabilities

• CVE-2026-30661 — (CVSS 6.1)
• CVE-2025-15394 — iCMS POST Parameter ConfigAdmincp.php save code injection (CVSS 7.2)
• CVE-2023-40953 — (CVSS 8.8)
• CVE-2023-39806 — (CVSS 9.8)
• CVE-2023-39805 — (CVSS 9.8)
• CVE-2022-41496 — (CVSS 9.8)
• CVE-2021-44978 — (CVSS 9.8)
• CVE-2021-44977 — (CVSS 7.5)
• CVE-2020-21141 — (CVSS 8.8)
• CVE-2020-26641 — (CVSS 8.8)
• CVE-2020-18070 — (CVSS 9.1)
• CVE-2020-19527 — (CVSS 9.8)
• CVE-2020-19142 — (CVSS 9.8)
• CVE-2020-24739 — (CVSS 6.5)
• CVE-2019-17583 — (CVSS 7.5)
• CVE-2019-17552 — (CVSS 9.8)
• CVE-2019-16677 — (CVSS 6.5)
• CVE-2019-11427 — (CVSS 6.1)
• CVE-2019-11426 — (CVSS 6.1)
• CVE-2019-8902 — (CVSS 5.7)
• CVE-2019-7237 — (CVSS 7.5)
• CVE-2019-7236 — (CVSS 7.5)
• CVE-2019-7235 — (CVSS 7.5)
• CVE-2019-7234 — (CVSS 9.1)
• CVE-2019-7160 — (CVSS 9.8)