Flycms Project

Records19All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high16CVSS 7.0–8.9

Exploited now

Flycms Project records in CISA KEV

No Flycms Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Flycms 19 records HIGH

Records

19 records in Flycms · all components

TI-2024-15144 CVE-2024-22819 · GHSA-fmgm-x3qp-r9pj

FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/email/email_templets_update.

HIGH 73

FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/email/email_templets_update.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00321 Published 2024-01-18 No fix listed CWE-352

TI-2024-15142 CVE-2024-22817 · GHSA-43mv-63pp-x6jr

FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/email/email_conf_updagte

HIGH 73

FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/email/email_conf_updagte

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00321 Published 2024-01-18 No fix listed CWE-352

TI-2024-15104 CVE-2024-22699 · GHSA-mj36-jpr7-6cfr

FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/admin/update_group_save.

HIGH 73

FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/admin/update_group_save.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00352 Published 2024-01-18 No fix listed CWE-352

TI-2024-15078 CVE-2024-22603 · GHSA-9xxx-prxf-wghm

FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/links/add_link

HIGH 73

FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/links/add_link

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00328 Published 2024-01-18 No fix listed CWE-352

TI-2024-15076 CVE-2024-22593 · GHSA-p94c-49x7-2v8m

FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/admin/add_group_save

HIGH 73

FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/admin/add_group_save

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00324 Published 2024-01-18 No fix listed CWE-352

TI-2024-15075 CVE-2024-22592 · GHSA-73mh-qcv6-c6ph

FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/user/group_update

HIGH 73

FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/user/group_update

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00324 Published 2024-01-18 No fix listed CWE-352

TI-2023-28517 CVE-2023-52073 · GHSA-4qc5-h9gg-8xf8

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the…

HIGH 73

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /system/site/config_footer_updagte.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00286 Published 2024-01-08 No fix listed CWE-352

TI-2020-18434 CVE-2020-36065 · GHSA-734f-vhpg-wrgp

Cross Site Request Forgery (CSRF) vulnerability in FlyCms 1.0 allows attackers to add…

HIGH 73

Cross Site Request Forgery (CSRF) vulnerability in FlyCms 1.0 allows attackers to add arbitrary administrator accounts via system/admin/admin_save.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00337 Published 2023-05-08 No fix listed CWE-352

TI-2024-15143 CVE-2024-22818 · GHSA-7qff-7fh9-7jrw

FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerbility via /system/site/filterKeyword_save

HIGH 71

FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerbility via /system/site/filterKeyword_save

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00321 Published 2024-01-18 No fix listed CWE-352

TI-2024-15077 CVE-2024-22601 · GHSA-7fqx-r379-hx9f

FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/score/scorerule_save

HIGH 71

FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/score/scorerule_save

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00235 Published 2024-01-18 No fix listed CWE-352

TI-2024-15074 CVE-2024-22591 · GHSA-jwjx-77h7-83hp

FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/user/group_save.

HIGH 71

FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/user/group_save.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00317 Published 2024-01-18 No fix listed CWE-352

TI-2023-28518 CVE-2023-52074 · GHSA-v875-9cwm-7qjc

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the…

HIGH 71

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component system/site/webconfig_updagte.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00286 Published 2024-01-08 No fix listed CWE-352

TI-2023-28516 CVE-2023-52072 · GHSA-h4xc-h944-r598

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the…

HIGH 71

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /system/site/userconfig_updagte.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00286 Published 2024-01-08 No fix listed CWE-352

TI-2024-18352 CVE-2024-27694 · GHSA-9mj6-86g5-vpqx

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability…

HIGH 66

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the /system/share/ztree_category_edit.

CVSS 3.1HIGH 7.4 Network Low privileges No interaction EPSS 0.00239 Published 2024-03-04 No fix listed CWE-352

TI-2024-14418 CVE-2024-21732 · GHSA-qp57-c82h-rxv9

FlyCms through abbaa5a allows XSS via the permission management feature.

MEDIUM 60

FlyCms through abbaa5a allows XSS via the permission management feature.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00427 Published 2024-01-01 No fix listed CWE-79

TI-2024-15062 CVE-2024-22549 · GHSA-w4p6-8j24-xpq3

FlyCms 1.0 is vulnerable to Cross Site Scripting (XSS) in the email settings of the website settings section.

MEDIUM 58

FlyCms 1.0 is vulnerable to Cross Site Scripting (XSS) in the email settings of the website settings section.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00379 Published 2024-01-18 No fix listed CWE-79

TI-2024-15069 CVE-2024-22568 · GHSA-g8g5-r26f-qmjp

FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/score/del.

LOW 38

FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/score/del.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00286 Published 2024-01-18 No fix listed CWE-352

TI-2020-13653 CVE-2020-19613 · GHSA-454g-cxf7-rrv8

Server Side Request Forgery (SSRF) vulnerability in saveUrlAs function in…

LOW 35

Server Side Request Forgery (SSRF) vulnerability in saveUrlAs function in ImagesService.java in sunkaifei FlyCMS version 20190503.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01258 Published 2021-04-01 No fix listed CWE-918

TI-2024-15061 CVE-2024-22548 · GHSA-j6v3-rqm7-vfhh

FlyCms 1.0 is vulnerable to Cross Site Scripting (XSS) in the system website settings website name section.

LOW 25

FlyCms 1.0 is vulnerable to Cross Site Scripting (XSS) in the system website settings website name section.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00439 Published 2024-01-18 No fix listed CWE-79

Open these records in search →

Critical	0
High	16
Medium	3
Low	0
No CVSS	0