Vulnerabilities in instantsoft

25 results

CVE-2023-4654LOWSensitive Cookie in HTTPS Session Without 'Secure' Attribute in instantsoft/icms2EPSS 0.3%CVE-2026-48707LOWInstantCMS vulnerable to SSRF via upload redirect bypass allows internal network service scanningEPSS 0.3%CVE-2026-108566MEDIUMInstantSoft icms2 Private Message index.tpl.php index cross site scriptingEPSS 0.2%CVE-2026-28281HIGHInstantCMS has Multiple CSRF VulnerabilitiesEPSS 0.2%CVE-2026-108568MEDIUMInstantSoft icms2 Billing paypal.php validatePaypalOrder data authenticityEPSS 0.1%

← previouspage 2 / 2next →