What’s Vulnerable › Products

instantsoft/icms2 vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your instantsoft/icms2 version is affected

Latest instantsoft/icms2 vulnerabilities

• CVE-2026-108568 — InstantSoft icms2 Billing paypal.php validatePaypalOrder data authenticity (CVSS 4.3)
• CVE-2026-108567 — InstantSoft icms2 Image image.php files_delete_file path traversal (CVSS 4.3)
• CVE-2026-108566 — InstantSoft icms2 Private Message index.tpl.php index cross site scripting (CVSS 3.5)
• CVE-2026-54611 — InstantCMS has Remote Code Execution in package installer (CVSS 5.5)
• CVE-2026-48707 — InstantCMS vulnerable to SSRF via upload redirect bypass allows internal network service scanning (CVSS 3.1)
• CVE-2023-4928 — SQL Injection in instantsoft/icms2 (CVSS 7.2)