Vulnerabilities

19 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos

ShowKEV only Public PoC CVSS ≥ 9 CVSS ≥ 7 EPSS ≥ 10%EPSS ≥ 50%Window24h 7d 30d 90d All

StackAll WordPress E-commerce Drupal Joomla npm pip Maven Go Packagist RubyGems NuGet

Sortpublished epss cvss KEV date updated vendor: flycms project ✕

CVE	Vulnerability	CVSS	EPSS	Flags	Affected	Exposure	Published
CVE-2024-27694	FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the /system/share/ztree_category_edit. FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the /system/share/ztree_category_edit. NVD description · AI analysis pending	7.4	<1%	PoC	flycms project flycms	—	Mar 4, 2024
CVE-2024-22699 +11 in the same advisory: …22603 …22593 …22592 …22818 …22817 …22819 +5	FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/admin/update_group_save. FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/admin/update_group_save. NVD description · AI analysis pending	8.8 group max	<1%	PoC	flycms project flycms	—	Jan 18, 2024
CVE-2023-52074 +2 in the same advisory: …52073 …52072	FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component system/site/webconfig_updagte. FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component system/site/webconfig_updagte. NVD description · AI analysis pending	8.8	<1%	PoC	flycms project flycms	—	Jan 8, 2024
CVE-2024-21732	FlyCms through abbaa5a allows XSS via the permission management feature. FlyCms through abbaa5a allows XSS via the permission management feature. NVD description · AI analysis pending	6.1	<1%	PoC	flycms project flycms	—	Jan 1, 2024
CVE-2020-36065	Cross Site Request Forgery (CSRF) vulnerability in FlyCms 1.0 allows attackers to add arbitrary administrator accounts via system/admin/admin_save. Cross Site Request Forgery (CSRF) vulnerability in FlyCms 1.0 allows attackers to add arbitrary administrator accounts via system/admin/admin_save. NVD description · AI analysis pending	8.8	<1%	PoC	flycms project flycms	—	May 8, 2023
CVE-2020-19613	Server Side Request Forgery (SSRF) vulnerability in saveUrlAs function in ImagesService.java in sunkaifei FlyCMS version 20190503. Server Side Request Forgery (SSRF) vulnerability in saveUrlAs function in ImagesService.java in sunkaifei FlyCMS version 20190503. NVD description · AI analysis pending	7.5	1%	PoC	flycms project flycms	—	Apr 1, 2021