Heyewei Jfinalcms vulnerabilities

• heyewei jfinalcms heyewei JFinalCMS API Endpoint save cross site scripting CVE-2026-2200 4.8 MediumFebruary 9, 2026
• heyewei jfinalcms JFinalCMS 1.0 is vulnerable to SQL Injection in rc/main/java/com/cms/entity/Content.java. The... CVE-2024-57665 9.8 CriticalJanuary 29, 2025
• heyewei jfinalcms JFinalCMS File Content ContentModel.java findPage sql injection CVE-2024-12351 5.3 MediumDecember 9, 2024
• heyewei jfinalcms JFinalCMS Template TemplateController.java update command injection CVE-2024-12350 5.3 MediumDecember 9, 2024
• heyewei jfinalcms JFinalCMS save cross-site request forgery CVE-2024-12349 6.9 MediumDecember 9, 2024
• heyewei jfinalcms JFinalCMS edit delete path traversal CVE-2024-8782 5.3 MediumSeptember 13, 2024
• heyewei jfinalcms JFinalCMS com.cms.util.TemplateUtils update path traversal CVE-2024-8706 5.3 MediumSeptember 11, 2024
• heyewei jfinalcms JFinalCMS com.cms.controller.admin.TemplateController update path traversal CVE-2024-8694 5.1 MediumSeptember 11, 2024
• heyewei jfinalcms JFinalCMS template cross site scripting CVE-2024-5379 5.3 MediumMay 26, 2024
• heyewei jfinalcms JFinalCMS content cross site scripting CVE-2024-5310 5.1 MediumMay 24, 2024
• heyewei jfinalcms heyewei JFinalCMS Custom Data Page sql injection CVE-2024-2568 4.7 MediumMarch 17, 2024