CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| CVE-2024-22603 | HIGH8.8 | FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/links/add_link | 18/01/2024 |
| CVE-2024-22601 | HIGH8.8 | FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/score/scorerule_save | 18/01/2024 |
| CVE-2024-22699 | HIGH8.8 | FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/admin/update_group_save. | 18/01/2024 |
| CVE-2024-22593 | HIGH8.8 | FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/admin/add_group_save | 18/01/2024 |
| CVE-2024-22592 | HIGH8.8 | FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/user/group_update | 18/01/2024 |
| CVE-2024-22591 | HIGH8.8 | FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/user/group_save. | 18/01/2024 |
| CVE-2024-22568 | HIGH8.8 | FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/score/del. | 18/01/2024 |
| CVE-2024-22549 | MEDIUM5.4 | FlyCms 1.0 is vulnerable to Cross Site Scripting (XSS) in the email settings of the website settings section. | 18/01/2024 |
| CVE-2024-22548 | MEDIUM5.4 | FlyCms 1.0 is vulnerable to Cross Site Scripting (XSS) in the system website settings website name section. | 18/01/2024 |
| CVE-2023-52074 | HIGH8.8 | FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component system/site/webconfig_updagte. | 08/01/2024 |
| CVE-2023-52073 | HIGH8.8 | FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /system/site/config_footer_updagte. | 08/01/2024 |
| CVE-2023-52072 | HIGH8.8 | FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /system/site/userconfig_updagte. | 08/01/2024 |
| CVE-2024-21732 | MEDIUM6.1 | FlyCms through abbaa5a allows XSS via the permission management feature. | 01/01/2024 |
| CVE-2020-36065 | HIGH8.8 | Cross Site Request Forgery (CSRF) vulnerability in FlyCms 1.0 allows attackers to add arbitrary administrator accounts via system/admin/admin_save. | 08/05/2023 |
| CVE-2020-19613 | HIGH7.5 | Server Side Request Forgery (SSRF) vulnerability in saveUrlAs function in ImagesService.java in sunkaifei FlyCMS version 20190503. | 01/04/2021 |