Vulnerabilities (CVE)

Filtered by vendor Instantcms Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-4381 1 Instantcms 1 Instantcms 2023-08-22 N/A 4.3 MEDIUM
Unverified Password Change in GitHub repository instantsoft/icms2 prior to 2.16.1-git.
CVE-2023-4187 1 Instantcms 1 Instantcms 2023-08-09 N/A 4.8 MEDIUM
Cross-site Scripting (XSS) - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1-git.
CVE-2023-4189 1 Instantcms 1 Instantcms 2023-08-09 N/A 4.8 MEDIUM
Cross-site Scripting (XSS) - Reflected in GitHub repository instantsoft/icms2 prior to 2.16.1-git.
CVE-2023-4188 1 Instantcms 1 Instantcms 2023-08-09 N/A 9.1 CRITICAL
SQL Injection in GitHub repository instantsoft/icms2 prior to 2.16.1-git.
CVE-2018-14382 1 Instantcms 1 Instantcms 2018-09-12 4.3 MEDIUM 6.1 MEDIUM
InstantCMS 2.10.1 has /redirect?url= XSS.