← All advisories

Critical severity9.8NVD Advisory· Published May 26, 2022· Updated Jun 17, 2026

CVE-2022-30500

CVE-2022-30500

Description

Jfinal cms 5.1.0 is vulnerable to SQL Injection.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
com.jflyfox:jflyfox_jfinalMaven	<= 5.1.0	—

Affected products

3

Jflyfox/Jfinal CMS
cpe:2.3:a:jflyfox:jfinal_cms:5.1.0:*:*:*:*:*:*:*
Jfinal/Jfinalcpe-rescue
ghsa-coords
pkg:maven/com.jflyfox/jflyfox_jfinal
Range: <= 5.1.0

Patches

Vulnerability mechanics

References

3

github.com/jflyfox/jfinal_cms/issues/35nvdExploitIssue TrackingThird Party AdvisoryWEB
github.com/advisories/GHSA-595x-hh6c-hfv8ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-30500ghsaADVISORY

News mentions

0

No linked articles in our index yet.