Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: instantsoft/icms2 2.16.1-git Clear all filters
TI-2023-04286 CVE-2023-4650 · GHSA-vp69-r7gq-xp5p

Improper Access Control in instantsoft/icms2

Priority MEDIUM 55

Improper Access Control in GitHub repository instantsoft/icms2 prior to 2.16.1-git.

CVSS 3.1MEDIUM 4.7 Network High privileges No interaction EPSS 0.00538 Published 2023-08-31 Fixed in 2.16.1-git CWE-284
TI-2023-04289 CVE-2023-4653 · GHSA-wwmp-qg3g-rq8m

Cross-site Scripting (XSS) - Stored in instantsoft/icms2

Priority MEDIUM 55

Cross-site Scripting (XSS) - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1-git.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00492 Published 2023-08-31 Fixed in 2.16.1-git CWE-79
TI-2023-04288 CVE-2023-4652 · GHSA-pwh6-38cc-87qf

Cross-site Scripting (XSS) - Stored in instantsoft/icms2

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1-git.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00506 Published 2023-08-31 Fixed in 2.16.1-git CWE-79