← All advisories

High severity8.8NVD Advisory· Published Jan 18, 2024· Updated Jun 17, 2026

CVE-2024-22591

CVE-2024-22591

Description

FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/user/group_save.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Flycms Project/Flycms
cpe:2.3:a:flycms_project:flycms:1.0:*:*:*:*:*:*:*
FlyCms/FlyCmsdescription
Sunkaifei/cms2llm-create
FlyCms/FlyCmsllm-fuzzy
Range: = 1.0

Patches

Vulnerability mechanics

References

1

github.com/ysuzhangbin/cms2/blob/main/1.mdnvdExploitProduct

News mentions

0

No linked articles in our index yet.