2 matches found
CVE-2026-112294
FlyCms through commit edfdf724 contains a missing authorization vulnerability in ActionService.counter that allows authenticated users to modify other users' content rows because checkRowOwner never verifies ownership. Any registered user can send requests to /ucenter/action/modelCode/id/counter ...
5.3CVSS0.00196EPSS
SaveExploits0References4
EUVD-2026-104279
FlyCms through commit edfdf724 contains a missing authorization vulnerability in ActionService.counter that allows authenticated users to modify other users' content rows because checkRowOwner never verifies ownership. Any registered user can send requests to /ucenter/action/modelCode/id/counter ...
5.3CVSS5.9AI score0.00196EPSS
SaveExploits0References4
20