Skip to content

Product

instantcms icms2 vulnerabilities

3 published CVES affecting instantcms icms2, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
2
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest instantcms icms2 CVEs

Newest publication first

  1. CVE-2024-50348 InstantCMS has a Cross Site Scripting Vulnerability

    Published
    MediumCVSS 5.4 EPSS 0.35%

    InstantCMS is a free and open source content management system. In photo upload function in the photo album page there is no input validation taking place. Due to this attackers are able to inject the XSS (Cross Site Scripting) payload and execute. This vulnerability is fixed in...

  2. CVE-2024-31212 SQL injection in index_chart_data action

    Published
    HighCVSS 7.2 EPSS 0.85%

    InstantCMS is a free and open source content management system. A SQL injection vulnerability affects instantcms v2.16.2 in which an attacker with administrative privileges can cause the application to execute unauthorized SQL code. The vulnerability exists in index_chart_data ac...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.