Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

21 records

Vendor: InstantCMS Component: Instantcms Clear all filters
TI-2013-06192 CVE-2013-10051 · GHSA-vv4j-q4m2-9gr7

InstantCMS <= 1.6 Remote PHP Code Execution

Priority HIGH 81

A remote PHP code execution vulnerability exists in InstantCMS version 1.6 and earlier due to unsafe use of eval() within the search view handler.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.03668 Published 2025-08-01 No fix listed CWE-95
TI-2024-20590 CVE-2024-31213

InstantCMS Open Redirect vulnerability

Priority MEDIUM 58

InstantCMS is a free and open source content management system.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00399 Published 2024-04-05 Fixed in 2.16.2 CWE-601
TI-2024-20589 CVE-2024-31212

SQL injection in index_chart_data action

Priority HIGH 67

InstantCMS is a free and open source content management system.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00854 Published 2024-04-04 No fix listed CWE-20
TI-2023-04493 CVE-2023-4879 · GHSA-658q-9r9r-h96x

Cross-site Scripting (XSS) - Stored in instantsoft/icms2

Priority LOW 22

Cross-site Scripting (XSS) - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1.-git.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00402 Published 2023-09-10 Fixed in 2.16.1.-git CWE-79
TI-2023-04492 CVE-2023-4878 · GHSA-w3hc-fc6c-v6hj

Server-Side Request Forgery (SSRF) in instantsoft/icms2

Priority LOW 25

Server-Side Request Forgery (SSRF) in GitHub repository instantsoft/icms2 prior to 2.16.1-git.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00376 Published 2023-09-10 Fixed in 2.16.1-git CWE-918
TI-2023-04286 CVE-2023-4650 · GHSA-vp69-r7gq-xp5p

Improper Access Control in instantsoft/icms2

Priority MEDIUM 55

Improper Access Control in GitHub repository instantsoft/icms2 prior to 2.16.1-git.

CVSS 3.1MEDIUM 4.7 Network High privileges No interaction EPSS 0.00538 Published 2023-08-31 Fixed in 2.16.1-git CWE-284
TI-2023-04285 CVE-2023-4649 · GHSA-v6v4-5w5j-fcq8

Session Fixation in instantsoft/icms2

Priority MEDIUM 58

Session Fixation in GitHub repository instantsoft/icms2 prior to 2.16.1.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00438 Published 2023-08-31 Fixed in 2.16.1 CWE-384
TI-2023-04287 CVE-2023-4651 · GHSA-wrv9-8qw6-67rv

Server-Side Request Forgery (SSRF) in instantsoft/icms2

Priority MEDIUM 58

Server-Side Request Forgery (SSRF) in GitHub repository instantsoft/icms2 prior to 2.16.1.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00415 Published 2023-08-31 Fixed in 2.16.1 CWE-918
TI-2023-04289 CVE-2023-4653 · GHSA-wwmp-qg3g-rq8m

Cross-site Scripting (XSS) - Stored in instantsoft/icms2

Priority MEDIUM 55

Cross-site Scripting (XSS) - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1-git.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00492 Published 2023-08-31 Fixed in 2.16.1-git CWE-79
TI-2023-04288 CVE-2023-4652 · GHSA-pwh6-38cc-87qf

Cross-site Scripting (XSS) - Stored in instantsoft/icms2

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1-git.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00506 Published 2023-08-31 Fixed in 2.16.1-git CWE-79
TI-2023-04047 CVE-2023-4381 · GHSA-3vxj-947v-9gfh

Unverified Password Change in instantsoft/icms2

Priority LOW 20

Unverified Password Change in GitHub repository instantsoft/icms2 prior to 2.16.1-git.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00432 Published 2023-08-16 Fixed in 2.16.1-git CWE-620
TI-2023-03878 CVE-2023-4189 · GHSA-cx85-vw9h-mf4j

Cross-site Scripting (XSS) - Reflected in instantsoft/icms2

Priority MEDIUM 55

Cross-site Scripting (XSS) - Reflected in GitHub repository instantsoft/icms2 prior to 2.16.1-git.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00473 Published 2023-08-05 Fixed in 2.16.1-git CWE-79
TI-2023-03877 CVE-2023-4188 · GHSA-h267-xjjf-qgxq

SQL Injection in instantsoft/icms2

Priority HIGH 80

SQL Injection in GitHub repository instantsoft/icms2 prior to 2.16.1-git.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00928 Published 2023-08-05 Fixed in 2.16.1-git CWE-89
TI-2023-03876 CVE-2023-4187 · GHSA-crx8-5gw7-25m9

Cross-site Scripting (XSS) - Stored in instantsoft/icms2

Priority MEDIUM 55

Cross-site Scripting (XSS) - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1-git.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00473 Published 2023-08-05 Fixed in 2.16.1-git CWE-79
TI-2018-10317 CVE-2018-14382 · GHSA-88w8-x5rx-69gv

InstantCMS 2.10.1 has /redirect?url= XSS.

Priority LOW 29

InstantCMS 2.10.1 has /redirect?url= XSS.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00865 Published 2018-07-18 No fix listed CWE-79