FlyCms vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

FL

Product

FlyCms

by sunkaifei · last CVE Oct 19, 2026

6

CVEs

0

On KEV

9.8

Max CVSS

3

New 30D

Vulnerabilities6 In the news0 Timeline

Severity mix

Critical 1High 1Medium 4Low 0

Severity

All severities6 Critical1 High1 Medium4 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add FlyCms to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-15094	6.1	0%	Dec 26	sunkaifei FlyCMS User Login UserController.java userLogin cross site scripting Affected: abbaa5a8daefb146ad4d61027035026b052cb414
CVE-2025-15093	6.1	0%	Dec 26	sunkaifei FlyCMS Admin Login IndexAdminController.java cross site scripting Affected: abbaa5a8daefb146ad4d61027035026b052cb414
CVE-2026-112295	5.4	0%	Oct 19	FlyCms through commit edfdf724 Mass Assignment via /ucenter/account_update Affected: through edfdf724c3b944310f60c29aa755d03a00a75837
CVE-2026-112294	4.3	0%	Oct 19	FlyCms through commit edfdf724 Missing Authorization via Action Counter Endpoint Affected: through edfdf724c3b944310f60c29aa755d03a00a75837