Heyewei
Heyewei Jfinalcms: vulnerabilidades y CVE
Heyewei Jfinalcms tiene 8 vulnerabilidades publicadas, 1 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE8
Últimos 12 meses1
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-2200 | Baja (1.9) | 0.24% | — | 9 feb 2026 | A weakness has been identified in heyewei JFinalCMS 5.0.0. This affects an unknown function of the file /admin/admin/save of the component API Endpoint. Executing a manipulation can lead to cross site scripting. The… |
| CVE-2024-57665 | Crítica (9.8) | 0.50% | — | 29 ene 2025 | JFinalCMS 1.0 is vulnerable to SQL Injection in rc/main/java/com/cms/entity/Content.java. The cause of the vulnerability is that the title parameter is controllable and is concatenated directly into filterSql without… |
| CVE-2024-8782 | Media (5.3) | 0.73% | — | 13 sept 2024 | A vulnerability was found in JFinalCMS up to 1.0. It has been rated as critical. This issue affects the function delete of the file /admin/template/edit. The manipulation of the argument name leads to path traversal.… |
| CVE-2024-8706 | Media (5.3) | 0.75% | — | 12 sept 2024 | A vulnerability was found in JFinalCMS up to 20240903. It has been classified as problematic. This affects the function update of the file /admin/template/update of the component com.cms.util.TemplateUtils. The… |
| CVE-2024-8694 | Media (5.1) | 0.79% | — | 11 sept 2024 | A vulnerability, which was classified as problematic, was found in JFinalCMS up to 20240903. This affects the function update of the file /admin/template/update of the component… |
| CVE-2024-5379 | Media (5.3) | 0.37% | — | 26 may 2024 | A vulnerability was found in JFinalCMS up to 20240111. It has been rated as problematic. This issue affects some unknown processing of the file /admin/template. The manipulation of the argument directory leads to cross… |
| CVE-2024-5310 | Media (5.1) | 0.36% | — | 24 may 2024 | A vulnerability classified as problematic has been found in JFinalCMS up to 20221020. This affects an unknown part of the file /admin/content. The manipulation of the argument Title leads to cross site scripting. It is… |
| CVE-2024-2568 | Alta (7.2) | 0.70% | — | 17 mar 2024 | A vulnerability has been found in heyewei JFinalCMS 5.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/div_data/delete?divId=9 of the component Custom Data… |