Heyewei / Jfinalcms
8 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-2200 | heyewei JFinalCMS API Endpoint save cross site scripting | MEDIUM | 4.8 | Feb 9, 2026 |
| CVE-2024-57665 | JFinalCMS 1.0 is vulnerable to SQL Injection in rc/main/java/com/cms/entity/Content.java. The cause of the vulnerability is that the title parameter is control… | CRITICAL | 9.8 | Jan 29, 2025 |
| CVE-2024-8782 | JFinalCMS edit delete path traversal | MEDIUM | 5.3 | Sep 13, 2024 |
| CVE-2024-8706 | JFinalCMS com.cms.util.TemplateUtils update path traversal | MEDIUM | 5.3 | Sep 11, 2024 |
| CVE-2024-8694 | JFinalCMS com.cms.controller.admin.TemplateController update path traversal | MEDIUM | 5.1 | Sep 11, 2024 |
| CVE-2024-5379 | JFinalCMS template cross site scripting | MEDIUM | 5.3 | May 26, 2024 |
| CVE-2024-5310 | JFinalCMS content cross site scripting | MEDIUM | 5.1 | May 24, 2024 |
| CVE-2024-2568 | heyewei JFinalCMS Custom Data Page sql injection | HIGH | 7.2 | Mar 17, 2024 |
Showing 1 to 8 of 8 CVEs