Advisories · Technology

rathena FluxCP.

Every CVE that names rathena FluxCP among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-116254 CVE record

CVSS 6.9 Medium

rathena FluxCP PayPal IPN PaymentNotifyRequest.php verifyiprange origin validation
- rathena FluxCP
- CWE-345
- CWE-346
Not analysed yet 26 Oct 2026
CVE-2025-62797 CVE record

CVSS 8.6 High

CSRF in FluxCP account endpoints allows account takeover / state-changing actions
- rathena FluxCP
- Cross-site request forgery (CSRF)
Not analysed yet 29 Oct 2025
CVE-2024-45799 CVE record

CVSS 7.3 High

Javascript Injection in Vending Info/Buyers Info Module in FluxCP
- rathena FluxCP
- Cross-site scripting (XSS)
- Information disclosure
Not analysed yet 16 Sept 2024
CVE-2022-4421 CVE record

CVSS 3.5 Low

rAthena FluxCP Service Desk Image URL view.php cross site scripting
- rAthena FluxCP
- CWE-707
Not analysed yet 12 Dec 2022