What’s Vulnerable › Products

JFinalCMS vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your JFinalCMS version is affected

Latest JFinalCMS vulnerabilities

• CVE-2026-2200 — heyewei JFinalCMS API Endpoint save cross site scripting (CVSS 4.8)
• CVE-2024-57665 — (CVSS 9.8)
• CVE-2024-8782 — JFinalCMS edit delete path traversal (CVSS 9.8)
• CVE-2024-8706 — JFinalCMS com.cms.util.TemplateUtils update path traversal (CVSS 6.5)
• CVE-2024-8694 — JFinalCMS com.cms.controller.admin.TemplateController update path traversal (CVSS 3.8)
• CVE-2024-5379 — JFinalCMS template cross site scripting (CVSS 5.4)
• CVE-2024-5310 — JFinalCMS content cross site scripting (CVSS 5.4)
• CVE-2024-2568 — heyewei JFinalCMS Custom Data Page sql injection (CVSS 7.2)