Jfinalcms
Heyewei · 8 CVEs
CVE-2026-2200
MEDIUM
heyewei JFinalCMS API Endpoint save cross site scripting
Feb 9, 2026
CVE-2024-57665
CRITICAL
JFinalCMS 1.0 is vulnerable to SQL Injection in rc/main/java/com/cms/entity/Content.java. The cause of the vulnerabilit…
Jan 29, 2025
CVE-2024-8782
MEDIUM
JFinalCMS edit delete path traversal
Sep 13, 2024
CVE-2024-8706
MEDIUM
JFinalCMS com.cms.util.TemplateUtils update path traversal
Sep 11, 2024
CVE-2024-8694
MEDIUM
JFinalCMS com.cms.controller.admin.TemplateController update path traversal
Sep 11, 2024
CVE-2024-5379
MEDIUM
JFinalCMS template cross site scripting
May 26, 2024
CVE-2024-5310
MEDIUM
JFinalCMS content cross site scripting
May 24, 2024
CVE-2024-2568
HIGH
heyewei JFinalCMS Custom Data Page sql injection
Mar 17, 2024
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-2200 | heyewei JFinalCMS API Endpoint save cross site scripting | MEDIUM | 0.24% | Feb 9, 2026 |
| CVE-2024-57665 | JFinalCMS 1.0 is vulnerable to SQL Injection in rc/main/java/com/cms/entity/Content.java. The cause of the vulnerability is that the title parameter is control… | CRITICAL | 0.50% | Jan 29, 2025 |
| CVE-2024-8782 | JFinalCMS edit delete path traversal | MEDIUM | 0.73% | Sep 13, 2024 |
| CVE-2024-8706 | JFinalCMS com.cms.util.TemplateUtils update path traversal | MEDIUM | 0.75% | Sep 11, 2024 |
| CVE-2024-8694 | JFinalCMS com.cms.controller.admin.TemplateController update path traversal | MEDIUM | 0.79% | Sep 11, 2024 |
| CVE-2024-5379 | JFinalCMS template cross site scripting | MEDIUM | 0.37% | May 26, 2024 |
| CVE-2024-5310 | JFinalCMS content cross site scripting | MEDIUM | 0.36% | May 24, 2024 |
| CVE-2024-2568 | heyewei JFinalCMS Custom Data Page sql injection | HIGH | 0.70% | Mar 17, 2024 |
Showing 1 to 8 of 8 CVEs