Vendor

Jfinalcms Project

Products

CVEs

Across products

Status

Private

Products

Jfinalcms
39 CVEs

Recent CVEs

View all 39 CVEs →

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2024-24029	JFinalcms JFinalcms	Cri	0.64	9.8	0.01	Feb 2, 2024	JFinalCMS 5.0.0 is vulnerable to SQL injection via /admin/content/data.
CVE-2022-27341	JFinalcms JFinalcms	Cri	0.64	9.8	0.01	Apr 22, 2022	JFinalCMS v2.0 was discovered to contain a SQL injection vulnerability via the Article Management function.
CVE-2024-40322	JFinalcms JFinalcms	Hig	0.57	8.8	0.00	Jul 16, 2024	An issue was discovered in JFinalCMS v.5.0.0. There is a SQL injection vulnerablity via /admin/div_data/data
CVE-2023-49448	JFinalcms JFinalcms	Hig	0.57	8.8	0.00	Dec 5, 2023	JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via admin/nav/delete.
CVE-2023-49447	JFinalcms JFinalcms	Hig	0.57	8.8	0.00	Dec 5, 2023	JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/nav/update.
CVE-2023-49446	JFinalcms JFinalcms	Hig	0.57	8.8	0.00	Dec 5, 2023	JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/nav/save.
CVE-2023-49398	JFinalcms JFinalcms	Hig	0.57	8.8	0.00	Dec 5, 2023	JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/delete.
CVE-2023-49397	JFinalcms JFinalcms	Hig	0.57	8.8	0.00	Dec 5, 2023	JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/updateStatus.
CVE-2023-49396	JFinalcms JFinalcms	Hig	0.57	8.8	0.00	Dec 5, 2023	JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/save.
CVE-2023-49395	JFinalcms JFinalcms	Hig	0.57	8.8	0.00	Dec 5, 2023	JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/update.
CVE-2023-49383	JFinalcms JFinalcms	Hig	0.57	8.8	0.00	Dec 5, 2023	JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/tag/save.
CVE-2023-49382	JFinalcms JFinalcms	Hig	0.57	8.8	0.00	Dec 5, 2023	JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/div/delete.
CVE-2023-49381	JFinalcms JFinalcms	Hig	0.57	8.8	0.00	Dec 5, 2023	JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/div/update.
CVE-2023-49380	JFinalcms JFinalcms	Hig	0.57	8.8	0.00	Dec 5, 2023	JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/friend_link/delete.
CVE-2023-49379	JFinalcms JFinalcms	Hig	0.57	8.8	0.00	Dec 5, 2023	JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /admin/friend_link/save.
CVE-2023-49378	JFinalcms JFinalcms	Hig	0.57	8.8	0.00	Dec 5, 2023	JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/form/save.
CVE-2023-49377	JFinalcms JFinalcms	Hig	0.57	8.8	0.00	Dec 5, 2023	JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/tag/update.
CVE-2023-49376	JFinalcms JFinalcms	Hig	0.57	8.8	0.00	Dec 5, 2023	JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/tag/delete.
CVE-2023-49375	JFinalcms JFinalcms	Hig	0.57	8.8	0.00	Dec 5, 2023	JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/friend_link/update.
CVE-2023-49374	JFinalcms JFinalcms	Hig	0.57	8.8	0.00	Dec 5, 2023	JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/slide/update.

CVE-2024-24029CriFeb 2, 2024
JFinalcms
JFinalcms
risk 0.64cvss 9.8epss 0.01
JFinalCMS 5.0.0 is vulnerable to SQL injection via /admin/content/data.
CVE-2022-27341CriApr 22, 2022
JFinalcms
JFinalcms
risk 0.64cvss 9.8epss 0.01
JFinalCMS v2.0 was discovered to contain a SQL injection vulnerability via the Article Management function.
CVE-2024-40322HigJul 16, 2024
JFinalcms
JFinalcms
risk 0.57cvss 8.8epss 0.00
An issue was discovered in JFinalCMS v.5.0.0. There is a SQL injection vulnerablity via /admin/div_data/data
CVE-2023-49448HigDec 5, 2023
JFinalcms
JFinalcms
risk 0.57cvss 8.8epss 0.00
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via admin/nav/delete.
CVE-2023-49447HigDec 5, 2023
JFinalcms
JFinalcms
risk 0.57cvss 8.8epss 0.00
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/nav/update.
CVE-2023-49446HigDec 5, 2023
JFinalcms
JFinalcms
risk 0.57cvss 8.8epss 0.00
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/nav/save.
CVE-2023-49398HigDec 5, 2023
JFinalcms
JFinalcms
risk 0.57cvss 8.8epss 0.00
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/delete.
CVE-2023-49397HigDec 5, 2023
JFinalcms
JFinalcms
risk 0.57cvss 8.8epss 0.00
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/updateStatus.
CVE-2023-49396HigDec 5, 2023
JFinalcms
JFinalcms
risk 0.57cvss 8.8epss 0.00
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/save.
CVE-2023-49395HigDec 5, 2023
JFinalcms
JFinalcms
risk 0.57cvss 8.8epss 0.00
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/update.
CVE-2023-49383HigDec 5, 2023
JFinalcms
JFinalcms
risk 0.57cvss 8.8epss 0.00
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/tag/save.
CVE-2023-49382HigDec 5, 2023
JFinalcms
JFinalcms
risk 0.57cvss 8.8epss 0.00
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/div/delete.
CVE-2023-49381HigDec 5, 2023
JFinalcms
JFinalcms
risk 0.57cvss 8.8epss 0.00
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/div/update.
CVE-2023-49380HigDec 5, 2023
JFinalcms
JFinalcms
risk 0.57cvss 8.8epss 0.00
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/friend_link/delete.
CVE-2023-49379HigDec 5, 2023
JFinalcms
JFinalcms
risk 0.57cvss 8.8epss 0.00
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /admin/friend_link/save.
CVE-2023-49378HigDec 5, 2023
JFinalcms
JFinalcms
risk 0.57cvss 8.8epss 0.00
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/form/save.
CVE-2023-49377HigDec 5, 2023
JFinalcms
JFinalcms
risk 0.57cvss 8.8epss 0.00
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/tag/update.
CVE-2023-49376HigDec 5, 2023
JFinalcms
JFinalcms
risk 0.57cvss 8.8epss 0.00
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/tag/delete.
CVE-2023-49375HigDec 5, 2023
JFinalcms
JFinalcms
risk 0.57cvss 8.8epss 0.00
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/friend_link/update.
CVE-2023-49374HigDec 5, 2023
JFinalcms
JFinalcms
risk 0.57cvss 8.8epss 0.00
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/slide/update.

View all 39 CVEs →