VendorsJflyfoxjfinal_cms5.0.1
Vulnerabilities

Jflyfox Jfinal CMS 5.0.1

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2021-42242
A command execution vulnerability exists in jfinal_cms 5.0.1 via com.jflyfox.component.controller.Ueditor.
Published 2022-05-05 · Modified
9.8EPSS 0.022
CVE-2025-6105
jflyfox jfinal_cms HOME.java cross-site request forgery
Published 2025-06-16 · Analyzed
8.8EPSS 0.003