Approved changes feed: RSS · Atom

cpe:2.3:a:instantsoft:instantsoft/icms2:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorInstantsoft (9eccb52c-3803-500c-971d-53a1e7a95264)
ProductInstantsoft/Icms2 (65a27a52-08b7-5f29-87d5-dc633156f53d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-4928 vulnerable 2026-06-08 06:16:14.921118 SQL Injection in instantsoft/icms2
HIGH (7.2)
SQL Injection in GitHub repository instantsoft/icms2 prior to 2.16.1.
Published: 2023-09-13T00:00:20.370Z
Updated: 2024-09-25T17:12:50.022Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4879 vulnerable 2026-06-08 06:16:14.788835 Cross-site Scripting (XSS) - Stored in instantsoft/icms2
LOW (3.5)
Cross-site Scripting (XSS) - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1.-git.
Published: 2023-09-10T17:53:35.787Z
Updated: 2024-09-26T15:32:29.131Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4878 vulnerable 2026-06-08 06:16:14.788494 Server-Side Request Forgery (SSRF) in instantsoft/icms2
MEDIUM (4.3)
Server-Side Request Forgery (SSRF) in GitHub repository instantsoft/icms2 prior to 2.16.1-git.
Published: 2023-09-10T17:49:08.351Z
Updated: 2024-09-26T15:25:50.573Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4704 vulnerable 2026-06-08 06:16:14.402370 External Control of System or Configuration Setting in instantsoft/icms2
HIGH (8.8)
External Control of System or Configuration Setting in GitHub repository instantsoft/icms2 prior to 2.16.1-git.
Published: 2023-09-01T09:55:29.640Z
Updated: 2024-10-01T13:12:36.669Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4655 vulnerable 2026-06-08 06:16:14.075141 Cross-site Scripting (XSS) - Reflected in instantsoft/icms2
MEDIUM (4.3)
Cross-site Scripting (XSS) - Reflected in GitHub repository instantsoft/icms2 prior to 2.16.1.
Published: 2023-08-31T00:00:42.783Z
Updated: 2024-10-01T18:06:17.491Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4654 vulnerable 2026-06-08 06:16:14.074700 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4653 vulnerable 2026-06-08 06:16:14.074167 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4652 vulnerable 2026-06-08 06:16:14.073621 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4651 vulnerable 2026-06-08 06:16:14.073132 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4650 vulnerable 2026-06-08 06:16:14.072692 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4649 vulnerable 2026-06-08 06:16:14.072317 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4381 vulnerable 2026-06-08 06:16:12.218376 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4189 vulnerable 2026-06-08 06:16:11.732166 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4188 vulnerable 2026-06-08 06:16:11.731592 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4187 vulnerable 2026-06-08 06:16:11.729970 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.