Vulnerabilities

TI-2026-01849 CVE-2026-2200 · GHSA-xhf6-49gh-77cw

heyewei JFinalCMS API Endpoint save cross site scripting

MEDIUM 55

A weakness has been identified in heyewei JFinalCMS 5.0.0.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00272 Published 2026-02-09 No fix listed CWE-79

TI-2024-38015 CVE-2024-57665 · GHSA-75x9-5mr4-583v

HIGH 82

JFinalCMS 1.0 is vulnerable to SQL Injection in rc/main/java/com/cms/entity/Content.java.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0051 Published 2025-01-29 No fix listed CWE-89

TI-2024-08148 CVE-2024-8782 · GHSA-fwj7-298v-7488

MEDIUM 57

A vulnerability was found in JFinalCMS up to 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00725 Published 2024-09-13 No fix listed CWE-22

TI-2024-08075 CVE-2024-8706 · GHSA-fmrw-pfr8-r4j7

MEDIUM 57

A vulnerability was found in JFinalCMS up to 20240903.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00749 Published 2024-09-11 No fix listed CWE-22

TI-2024-08064 CVE-2024-8694 · GHSA-mx92-jwq3-h28x

MEDIUM 56

A vulnerability, which was classified as problematic, was found in JFinalCMS up to 20240903.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00792 Published 2024-09-11 No fix listed CWE-22

TI-2024-04998 CVE-2024-5379

LOW 24

A vulnerability was found in JFinalCMS up to 20240111.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00368 Published 2024-05-26 No fix listed CWE-79

TI-2024-04933 CVE-2024-5310

MEDIUM 56

A vulnerability classified as problematic has been found in JFinalCMS up to 20221020.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00364 Published 2024-05-24 No fix listed CWE-79

TI-2024-02388 CVE-2024-2568 · GHSA-2wxc-99ff-4mwq

HIGH 65

A vulnerability has been found in heyewei JFinalCMS 5.0.0 and classified as critical.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00698 Published 2024-03-17 No fix listed CWE-89