Instantsoft vulnerabilities
25 CVEs and advisories name Instantsoft as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-108568InstantSoft icms2 Billing paypal.php validatePaypalOrder data authenticity
- CVE-2026-108567InstantSoft icms2 Image image.php files_delete_file path traversal
- CVE-2026-108566InstantSoft icms2 Private Message index.tpl.php index cross site scripting
- CVE-2026-48707InstantCMS vulnerable to SSRF via upload redirect bypass allows internal network service scanning
- CVE-2026-54611InstantCMS has Remote Code Execution in package installer
- CVE-2026-28281InstantCMS has Multiple CSRF Vulnerabilities
- CVE-2025-59055InstantCMS vulnerable to Server-Side Request Forgery via package installer
- CVE-2024-50348InstantCMS has a Cross Site Scripting Vulnerability
- CVE-2024-31213InstantCMS Open Redirect vulnerability
- CVE-2024-31212SQL injection in index_chart_data action
- CVE-2023-4928SQL Injection in instantsoft/icms2
- CVE-2023-4879Cross-site Scripting (XSS) - Stored in instantsoft/icms2
- CVE-2023-4878Server-Side Request Forgery (SSRF) in instantsoft/icms2
- CVE-2023-4704External Control of System or Configuration Setting in instantsoft/icms2
- CVE-2023-4654Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in instantsoft/icms2
- CVE-2023-4655Cross-site Scripting (XSS) - Reflected in instantsoft/icms2
- CVE-2023-4650Improper Access Control in instantsoft/icms2
- CVE-2023-4649Session Fixation in instantsoft/icms2
- CVE-2023-4651Server-Side Request Forgery (SSRF) in instantsoft/icms2
- CVE-2023-4653Cross-site Scripting (XSS) - Stored in instantsoft/icms2
- CVE-2023-4652Cross-site Scripting (XSS) - Stored in instantsoft/icms2
- CVE-2023-4381Unverified Password Change in instantsoft/icms2
- CVE-2023-4189Cross-site Scripting (XSS) - Reflected in instantsoft/icms2
- CVE-2023-4188SQL Injection in instantsoft/icms2
- CVE-2023-4187Cross-site Scripting (XSS) - Stored in instantsoft/icms2