Advisories · Technology

jflyfox jfinal_cms.

Every CVE that names jflyfox jfinal_cms among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-11473 CVE record

CVSS 5.3 Medium

jflyfox jfinal_cms AdvicefeedbackController.java list sql injection
- jflyfox jfinal_cms
- Other injection
- SQL injection
Not analysed yet 8 Jun 2026
CVE-2025-6105 CVE record

CVSS 5.3 Medium

jflyfox jfinal_cms HOME.java cross-site request forgery
- jflyfox jfinal_cms
- Cross-site request forgery (CSRF)
- Broken access control
Not analysed yet 16 Jun 2025