Instantcms

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-28281 HIGH This Week

InstantCMS is a free and open source content management system. versions up to 2.18.1 is affected by cross-site request forgery (csrf) (CVSS 7.1).

CSRF Instantcms

NVD GitHub VulDB

CVSS 3.1

7.1

EPSS

0.0%

CVE-2025-59055 MEDIUM POC PATCH Monitor

InstantCMS is a free and open source content management system. Rated medium severity (CVSS 4.7), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

SSRF Instantcms

NVD GitHub

CVSS 3.1

4.7

EPSS

0.2%

CVE-2026-28281

EPSS 0% CVSS 7.1

HIGH This Week

InstantCMS is a free and open source content management system. versions up to 2.18.1 is affected by cross-site request forgery (csrf) (CVSS 7.1).

CSRF Instantcms

NVD GitHub VulDB

CVE-2025-59055

EPSS 0% CVSS 4.7

MEDIUM POC PATCH Monitor

InstantCMS is a free and open source content management system. Rated medium severity (CVSS 4.7), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

SSRF Instantcms

NVD GitHub