Product by Sunkaifei

    FlyCMS

    6 known vulnerabilities in FlyCMS (Sunkaifei), 0 of them actively exploited (CISA KEV).

    Key figures

    6

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in FlyCMS (Sunkaifei)
    CriticalCVE-2026-112296

    FlyCms through commit edfdf724 Default Super Administrator Credentials

    		9.8
    HighCVE-2024-22939

    FlyCMS: Cross-Site Request Forgery (CSRF)

    		8.8
    MediumCVE-2026-112295

    FlyCms through commit edfdf724 Mass Assignment via /ucenter/account_update

    		5.4
    MediumCVE-2026-112294

    FlyCms through commit edfdf724 Missing Authorization via Action Counter Endpoint

    		4.3
    MediumCVE-2025-15093

    sunkaifei FlyCMS Admin Login IndexAdminController.java cross site scripting

    		4.3
    MediumCVE-2025-15094

    sunkaifei FlyCMS User Login UserController.java userLogin cross site scripting

    		4.3

    All products by Sunkaifei