CVE-2024-22939

CVE-2024-22939 describes a Cross Site Request Forgery in FlyCms v1.0, specifically via the system/article/category_edit component, enabling a remote attacker to execute arbitrary code. The vulnerability is categorized with high impact (C/H/I/A) and network attack vector with user interaction requ...

CVE-2025-15093

The CVE-2025-15093 entry concerns sunkaifei FlyCMS, affecting the Admin Login path in IndexAdminController.java. The vulnerability arises from manipulating the redirectUrl argument, enabling cross-site scripting. Impact is remote, with a publicly released exploit noted. The affected scope is desc...

CVE-2025-15094

CVE-2025-15094 affects sunkaifei FlyCMS, with the vulnerability located in the User Login path: the function userLogin in src/main/java/com/flycms/web/front/UserController.java. The issue arises from manipulating the redirectUrl parameter, leading to cross-site scripting. The weaknesses are remot...