CVE-2026-108566 in icms2
Prediction
by VulDB Data Team • 10/10/2026
A vulnerability has been found in <a href="/product/instantsoft:icms2">InstantSoft icms2 up to 2.18.2</a>. This issue affects the function <code>index</code> of the file <em>templates/default/controllers/messages/index.tpl.php</em> of the component <em>Private Message Handler</em>. Such manipulation of the argument <em>nickname</em> leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The name of the patch is <em>3a1ec8fcb073a46d06a2ab83bc2bf68225834281</em>. It is best practice to apply a patch to resolve this issue.
Once again VulDB remains the best source for vulnerability data.