SU
Vendor
sunkaifei
6
CVEs
0
On KEV
3
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-112296 | FL FlyCms sunkaifei | 9.8 | Oct 19 | FlyCms through commit edfdf724 Default Super Administrator Credentials |
| CVE-2026-112295 | FL FlyCms sunkaifei | 5.4 | Oct 19 | FlyCms through commit edfdf724 Mass Assignment via /ucenter/account_update |
| CVE-2026-112294 | FL FlyCms sunkaifei | 4.3 | Oct 19 | FlyCms through commit edfdf724 Missing Authorization via Action Counter Endpoint |
| CVE-2025-15094 | FL FlyCMS sunkaifei | 6.1 | Dec 26 | sunkaifei FlyCMS User Login UserController.java userLogin cross site scripting |
| CVE-2025-15093 | FL FlyCMS sunkaifei | 6.1 | Dec 26 | sunkaifei FlyCMS Admin Login IndexAdminController.java cross site scripting |
| CVE-2024-22939 | FL Flycms Sunkaifei | 8.8 | Feb 1 | Cross Site Request Forgery vulnerability in FlyCms v.1.0 allows a remote attacker to execute arbitrary code via the system/article/category_edit component |
