Read the docs

InstantCMS

Records22All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

InstantCMS records in CISA KEV

No InstantCMS vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Icms2 · all components

TI-2023-04538 CVE-2023-4928 · GHSA-36hm-c3f9-q57c

SQL Injection in instantsoft/icms2

Priority HIGH 67

SQL Injection in GitHub repository instantsoft/icms2 prior to 2.16.1.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00902 Published 2023-09-13 Fixed in 2.16.1 CWE-89
Open these records in search →