Instantcms CVEs & Vulnerabilities

1 CVEs affecting Instantcms products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

instantcms 1

CVE-2026-28281HIGH

InstantCMS is a free and open source content management system. Prior to 2.18.1, InstantCMS does not validate CSRF tokens, which allows attackers grant moderator privileges to users, execute scheduled tasks, move posts to trash, and accept friend requests on behalf of the user. This vulnerability is fixed in 2.18.1.

10 Mar 2026

7.1

CVSS

← PrevPage 1 / 1Next →

← All Vendors·CVE Database