CVE-2023-4649

MediumCVSS 5.4

Published: 31/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.37%

28th percentile - higher than 28% of all known CVEs

Session Fixation vulnerability in GitHub repository instantsoft/icms2 prior to version 2.16.1.

An attacker could hijack a user's session, leading to unauthorized access to application data and functions.

It is recommended to upgrade to version 2.16.1 or later to mitigate this vulnerability.

Original NVD description (English source)

Session Fixation in GitHub repository instantsoft/icms2 prior to 2.16.1.