Login Request a demo
FL
Product
FlyCms
by sunkaifei · last CVE Oct 19, 2026
6
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 1High 1Medium 4Low 0
Severity
All severities6Critical1High1Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add FlyCms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-112296
9.8
0%
Oct 19
FlyCms through commit edfdf724 Default Super Administrator Credentials
Affected: through edfdf724c3b944310f60c29aa755d03a00a75837
CVE-2024-22939
8.8
1%
Feb 1
Cross Site Request Forgery vulnerability in FlyCms v.1.0 allows a remote attacker to execute arbitrary code via the system/article/category_edit component
Affected: 1.0
CVE-2025-15094
6.1
0%
Dec 26
sunkaifei FlyCMS User Login UserController.java userLogin cross site scripting
Affected: abbaa5a8daefb146ad4d61027035026b052cb414
CVE-2025-15093
6.1
0%
Dec 26
sunkaifei FlyCMS Admin Login IndexAdminController.java cross site scripting
Affected: abbaa5a8daefb146ad4d61027035026b052cb414
CVE-2026-112295
5.4
0%
Oct 19
FlyCms through commit edfdf724 Mass Assignment via /ucenter/account_update
Affected: through edfdf724c3b944310f60c29aa755d03a00a75837
CVE-2026-112294
4.3
0%
Oct 19
FlyCms through commit edfdf724 Missing Authorization via Action Counter Endpoint
Affected: through edfdf724c3b944310f60c29aa755d03a00a75837
Showing 6