CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 01/08/2025 |
| CVE-2024-50348 | 보통5.4 | InstantCMS is a free and open source content management system. In photo upload function in the photo album page there is no input validation taking place. Due to this attackers are able to inject the XSS (Cross Site Scripting) payload and execute. This vulnerability is fixed in 2.16.3. | 29/10/2024 |
| CVE-2024-31213 | 보통5.4 | InstantCMS is a free and open source content management system. An open redirect was found in the ICMS2 application version 2.16.2 when being redirected after modifying one's own user profile. An attacker could trick a victim into visiting their web application, thinking they are still present on the ICMS2 application. | 05/04/2024 |
| CVE-2024-31212 | 높음7.2 | InstantCMS is a free and open source content management system. A SQL injection vulnerability affects instantcms v2.16.2 in which an attacker with administrative privileges can cause the application to execute unauthorized SQL code. The vulnerability exists in index_chart_data action, which receives an input from user | 04/04/2024 |
| CVE-2023-4928 | 높음7.2 | SQL Injection in GitHub repository instantsoft/icms2 prior to 2.16.1. | 13/09/2023 |
| CVE-2023-4879 | 보통4.8 | Cross-site Scripting (XSS) - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1.-git. | 10/09/2023 |
| CVE-2023-4878 | 보통5.4 | Server-Side Request Forgery (SSRF) in GitHub repository instantsoft/icms2 prior to 2.16.1-git. | 10/09/2023 |
| CVE-2023-4704 | 보통4.9 | External Control of System or Configuration Setting in GitHub repository instantsoft/icms2 prior to 2.16.1-git. | 01/09/2023 |
| CVE-2023-4655 | 보통6.1 | Cross-site Scripting (XSS) - Reflected in GitHub repository instantsoft/icms2 prior to 2.16.1. | 31/08/2023 |
| CVE-2023-4654 | 낮음3.5 | Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository instantsoft/icms2 prior to 2.16.1. | 31/08/2023 |
| CVE-2023-4653 | 보통4.8 | Cross-site Scripting (XSS) - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1-git. | 31/08/2023 |
| CVE-2023-4652 | 보통5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1-git. | 31/08/2023 |
| CVE-2023-4651 | 보통5.4 | Server-Side Request Forgery (SSRF) in GitHub repository instantsoft/icms2 prior to 2.16.1. | 31/08/2023 |
| CVE-2023-4650 | 보통4.7 | Improper Access Control in GitHub repository instantsoft/icms2 prior to 2.16.1-git. | 31/08/2023 |
| CVE-2023-4649 | 보통5.4 | Session Fixation in GitHub repository instantsoft/icms2 prior to 2.16.1. | 31/08/2023 |
| CVE-2023-4381 | 보통4.3 | Unverified Password Change in GitHub repository instantsoft/icms2 prior to 2.16.1-git. | 16/08/2023 |
| CVE-2023-4189 | 보통4.8 | Cross-site Scripting (XSS) - Reflected in GitHub repository instantsoft/icms2 prior to 2.16.1-git. | 05/08/2023 |
| CVE-2023-4188 | 심각9.1 | SQL Injection in GitHub repository instantsoft/icms2 prior to 2.16.1-git. | 05/08/2023 |