A vulnerability was found in instantsoft icms2 up to 2.18.0. It has been rated as problematic. The impacted element is an unknown function. The manipulation leads to cross-site request forgery.
This vulnerability is referenced as CVE-2026-28281. Remote exploitation of the attack is possible. No exploit is available.
Upgrading the affected component is advised.
