What’s Vulnerable › Products

Thecosy IceCMS vulnerabilities

23 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your Thecosy IceCMS version is affected

Latest Thecosy IceCMS vulnerabilities

• CVE-2026-111686 — IceCMS through 4.1.5 SQL Injection via /WebArticle/findarticlesbynum (CVSS 7.5)
• CVE-2026-111685 — IceCMS through 4.1.5 SQL Injection via /WebResource/findresourcebynum (CVSS 7.5)
• CVE-2026-111673 — IceCMS through 4.1.5 Missing Authentication via /User Administrative Endpoints (CVSS 9.8)
• CVE-2025-22984 — (CVSS 7.5)
• CVE-2025-22983 — (CVSS 7.5)
• CVE-2024-48202 — (CVSS 9.8)
• CVE-2024-46612 — (CVSS 9.8)
• CVE-2024-46610 — (CVSS 7.5)
• CVE-2024-46609 — (CVSS 7.5)
• CVE-2024-46607 — (CVSS 7.6)
• CVE-2023-6762 — Thecosy IceCMS Article permission (CVSS 4.3)
• CVE-2023-6761 — Thecosy IceCMS User Data access control (CVSS 8.8)
• CVE-2023-6760 — Thecosy IceCMS user session (CVSS 5.4)
• CVE-2023-6759 — Thecosy IceCMS Love resource improper enforcement of a single, unique action (CVSS 7.5)
• CVE-2023-6758 — Thecosy IceCMS API PlanetCommentList access control (CVSS 4.3)
• CVE-2023-6757 — Thecosy IceCMS API PlanetUser information disclosure (CVSS 6.5)
• CVE-2023-6756 — Thecosy IceCMS Captcha login excessive authentication (CVSS 9.8)
• CVE-2023-6467 — Thecosy IceCMS Comment Like improper enforcement of a single, unique action (CVSS 3.7)
• CVE-2023-6466 — Thecosy IceCMS User Comment planet cross site scripting (CVSS 6.1)
• CVE-2023-6438 — Thecosy IceCMS Like improper enforcement of a single, unique action (CVSS 5.3)
• CVE-2023-40833 — (CVSS 9.8)
• CVE-2023-33356 — (CVSS 5.4)
• CVE-2023-33355 — (CVSS 7.5)