agentprime: instantsoft-icms2Every new CVE for instantsoft-icms2.https://agentprime.io/CVE-2026-108568: InstantSoft icms2 Billing paypal.php validatePaypalOrder data authenticityhttps://agentprime.io/advisories/CVE-2026-108568/https://agentprime.io/advisories/CVE-2026-108568/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 11 Oct 2026 09:45:15 GMTCVECVE-2026-108567: InstantSoft icms2 Image image.php files_delete_file path traversalhttps://agentprime.io/advisories/CVE-2026-108567/https://agentprime.io/advisories/CVE-2026-108567/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 11 Oct 2026 09:30:21 GMTCVECVE-2026-108566: InstantSoft icms2 Private Message index.tpl.php index cross site scriptinghttps://agentprime.io/advisories/CVE-2026-108566/https://agentprime.io/advisories/CVE-2026-108566/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 11 Oct 2026 09:15:16 GMTCVECVE-2026-48707: InstantCMS vulnerable to SSRF via upload redirect bypass allows internal network service scanninghttps://agentprime.io/advisories/CVE-2026-48707/https://agentprime.io/advisories/CVE-2026-48707/CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 17:26:35 GMTCVECVE-2026-54611: InstantCMS has Remote Code Execution in package installerhttps://agentprime.io/advisories/CVE-2026-54611/https://agentprime.io/advisories/CVE-2026-54611/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 17:16:08 GMTCVECVE-2026-28281: InstantCMS has Multiple CSRF Vulnerabilitieshttps://agentprime.io/advisories/CVE-2026-28281/https://agentprime.io/advisories/CVE-2026-28281/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Mar 2026 22:13:24 GMTCVECVE-2025-59055: InstantCMS vulnerable to Server-Side Request Forgery via package installerhttps://agentprime.io/advisories/CVE-2025-59055/https://agentprime.io/advisories/CVE-2025-59055/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 11 Sep 2025 18:46:29 GMTCVECVE-2024-50348: InstantCMS has a Cross Site Scripting Vulnerabilityhttps://agentprime.io/advisories/CVE-2024-50348/https://agentprime.io/advisories/CVE-2024-50348/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Oct 2024 22:25:19 GMTCVECVE-2024-31213: InstantCMS Open Redirect vulnerabilityhttps://agentprime.io/advisories/CVE-2024-31213/https://agentprime.io/advisories/CVE-2024-31213/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Apr 2024 14:43:06 GMTCVECVE-2024-31212: SQL injection in index_chart_data actionhttps://agentprime.io/advisories/CVE-2024-31212/https://agentprime.io/advisories/CVE-2024-31212/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Apr 2024 23:02:38 GMTCVECVE-2023-4928: SQL Injection in instantsoft/icms2https://agentprime.io/advisories/CVE-2023-4928/https://agentprime.io/advisories/CVE-2023-4928/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Sep 2023 00:00:20 GMTCVECVE-2023-4879: Cross-site Scripting (XSS) - Stored in instantsoft/icms2https://agentprime.io/advisories/CVE-2023-4879/https://agentprime.io/advisories/CVE-2023-4879/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sun, 10 Sep 2023 17:53:35 GMTCVECVE-2023-4878: Server-Side Request Forgery (SSRF) in instantsoft/icms2https://agentprime.io/advisories/CVE-2023-4878/https://agentprime.io/advisories/CVE-2023-4878/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 10 Sep 2023 17:49:08 GMTCVECVE-2023-4704: External Control of System or Configuration Setting in instantsoft/icms2https://agentprime.io/advisories/CVE-2023-4704/https://agentprime.io/advisories/CVE-2023-4704/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 01 Sep 2023 09:55:29 GMTCVECVE-2023-4654: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in instantsoft/icms2https://agentprime.io/advisories/CVE-2023-4654/https://agentprime.io/advisories/CVE-2023-4654/CVSS 2.6 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 31 Aug 2023 00:00:44 GMTCVECVE-2023-4655: Cross-site Scripting (XSS) - Reflected in instantsoft/icms2https://agentprime.io/advisories/CVE-2023-4655/https://agentprime.io/advisories/CVE-2023-4655/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 31 Aug 2023 00:00:42 GMTCVECVE-2023-4650: Improper Access Control in instantsoft/icms2https://agentprime.io/advisories/CVE-2023-4650/https://agentprime.io/advisories/CVE-2023-4650/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 31 Aug 2023 00:00:19 GMTCVECVE-2023-4649: Session Fixation in instantsoft/icms2https://agentprime.io/advisories/CVE-2023-4649/https://agentprime.io/advisories/CVE-2023-4649/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 31 Aug 2023 00:00:19 GMTCVECVE-2023-4651: Server-Side Request Forgery (SSRF) in instantsoft/icms2https://agentprime.io/advisories/CVE-2023-4651/https://agentprime.io/advisories/CVE-2023-4651/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 31 Aug 2023 00:00:19 GMTCVECVE-2023-4653: Cross-site Scripting (XSS) - Stored in instantsoft/icms2https://agentprime.io/advisories/CVE-2023-4653/https://agentprime.io/advisories/CVE-2023-4653/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 31 Aug 2023 00:00:19 GMTCVECVE-2023-4652: Cross-site Scripting (XSS) - Stored in instantsoft/icms2https://agentprime.io/advisories/CVE-2023-4652/https://agentprime.io/advisories/CVE-2023-4652/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 31 Aug 2023 00:00:19 GMTCVECVE-2023-4381: Unverified Password Change in instantsoft/icms2https://agentprime.io/advisories/CVE-2023-4381/https://agentprime.io/advisories/CVE-2023-4381/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Aug 2023 11:02:27 GMTCVECVE-2023-4189: Cross-site Scripting (XSS) - Reflected in instantsoft/icms2https://agentprime.io/advisories/CVE-2023-4189/https://agentprime.io/advisories/CVE-2023-4189/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 05 Aug 2023 19:17:54 GMTCVECVE-2023-4188: SQL Injection in instantsoft/icms2https://agentprime.io/advisories/CVE-2023-4188/https://agentprime.io/advisories/CVE-2023-4188/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sat, 05 Aug 2023 19:10:37 GMTCVEcriticalCVE-2023-4187: Cross-site Scripting (XSS) - Stored in instantsoft/icms2https://agentprime.io/advisories/CVE-2023-4187/https://agentprime.io/advisories/CVE-2023-4187/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sat, 05 Aug 2023 17:17:59 GMTCVE