What’s Vulnerable › Products

jflyfox jfinal_cms vulnerabilities

52 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your jflyfox jfinal_cms version is affected

Latest jflyfox jfinal_cms vulnerabilities

• CVE-2026-11473 — jflyfox jfinal_cms AdvicefeedbackController.java list sql injection (CVSS 6.3)
• CVE-2025-6105 — jflyfox jfinal_cms HOME.java cross-site request forgery (CVSS 8.8)
• CVE-2024-53477 — (CVSS 9.8)
• CVE-2023-47503 — (CVSS 9.8)
• CVE-2023-34645 — (CVSS 7.5)
• CVE-2023-30349 — (CVSS 9.8)
• CVE-2023-24747 — (CVSS 5.4)
• CVE-2023-22975 — (CVSS 6.1)
• CVE-2022-37202 — (CVSS 8.8)
• CVE-2022-37208 — (CVSS 8.8)
• CVE-2022-37209 — (CVSS 8.8)
• CVE-2022-37205 — (CVSS 8.8)
• CVE-2022-37204 — (CVSS 9.8)
• CVE-2022-37203 — (CVSS 9.8)
• CVE-2022-37201 — (CVSS 8.8)
• CVE-2022-37207 — (CVSS 8.8)
• CVE-2022-38286 — (CVSS 7.2)
• CVE-2022-38285 — (CVSS 7.2)
• CVE-2022-38284 — (CVSS 7.2)
• CVE-2022-38283 — (CVSS 7.2)
• CVE-2022-38282 — (CVSS 7.2)
• CVE-2022-38281 — (CVSS 7.2)
• CVE-2022-38280 — (CVSS 7.2)
• CVE-2022-38279 — (CVSS 7.2)
• CVE-2022-38278 — (CVSS 7.2)