iCMS vulnerabilities
We track 1 vulnerability in iCMS products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on December 31, 2025.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest iCMS vulnerabilities
- 7.2 High severity
iCMS: Improper Control of Generation of Code
A vulnerability was detected in iCMS up to 8.0.0. Affected is the function Save of the file app/config/ConfigAdmincp.php of the component POST Parameter Handler. The manipulation of the argument config results in code injection. The attack can be launched remo