PatchTheCVE: flycms projecthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-27694: FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the /system/share/https://patchthecve.com/cve/CVE-2024-27694.htmlhttps://patchthecve.com/cve/CVE-2024-27694.htmlWed, 17 Jun 2026 07:20:09 +0000HIGH 7.4: FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the /system/share/ztree_category_edit.CVE-2024-22819: FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/email/email_templets_updatehttps://patchthecve.com/cve/CVE-2024-22819.htmlhttps://patchthecve.com/cve/CVE-2024-22819.htmlWed, 17 Jun 2026 07:11:47 +0000HIGH 8.8: FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/email/email_templets_update.CVE-2024-22818: FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerbility via /system/site/filterKeyword_savehttps://patchthecve.com/cve/CVE-2024-22818.htmlhttps://patchthecve.com/cve/CVE-2024-22818.htmlWed, 17 Jun 2026 07:11:46 +0000HIGH 8.8: FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerbility via /system/site/filterKeyword_saveCVE-2024-22817: FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/email/email_conf_updagtehttps://patchthecve.com/cve/CVE-2024-22817.htmlhttps://patchthecve.com/cve/CVE-2024-22817.htmlWed, 17 Jun 2026 07:11:46 +0000HIGH 8.8: FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/email/email_conf_updagteCVE-2024-22603: FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/links/add_linkhttps://patchthecve.com/cve/CVE-2024-22603.htmlhttps://patchthecve.com/cve/CVE-2024-22603.htmlWed, 17 Jun 2026 07:11:35 +0000HIGH 8.8: FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/links/add_linkCVE-2024-22601: FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/score/scorerule_savehttps://patchthecve.com/cve/CVE-2024-22601.htmlhttps://patchthecve.com/cve/CVE-2024-22601.htmlWed, 17 Jun 2026 07:11:35 +0000HIGH 8.8: FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/score/scorerule_saveCVE-2024-22699: FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/admin/update_group_save.https://patchthecve.com/cve/CVE-2024-22699.htmlhttps://patchthecve.com/cve/CVE-2024-22699.htmlWed, 17 Jun 2026 07:11:40 +0000HIGH 8.8: FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/admin/update_group_save.CVE-2024-22593: FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/admin/add_group_savehttps://patchthecve.com/cve/CVE-2024-22593.htmlhttps://patchthecve.com/cve/CVE-2024-22593.htmlWed, 17 Jun 2026 07:11:35 +0000HIGH 8.8: FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/admin/add_group_saveCVE-2024-22592: FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/user/group_updatehttps://patchthecve.com/cve/CVE-2024-22592.htmlhttps://patchthecve.com/cve/CVE-2024-22592.htmlWed, 17 Jun 2026 07:11:35 +0000HIGH 8.8: FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/user/group_updateCVE-2024-22591: FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/user/group_save.https://patchthecve.com/cve/CVE-2024-22591.htmlhttps://patchthecve.com/cve/CVE-2024-22591.htmlWed, 17 Jun 2026 07:11:35 +0000HIGH 8.8: FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/user/group_save.CVE-2024-22568: FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/score/del.https://patchthecve.com/cve/CVE-2024-22568.htmlhttps://patchthecve.com/cve/CVE-2024-22568.htmlWed, 17 Jun 2026 07:11:34 +0000HIGH 8.8: FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/score/del.CVE-2024-22549: FlyCms 1.0 is vulnerable to Cross Site Scripting (XSS) in the email settings of the website settings section.https://patchthecve.com/cve/CVE-2024-22549.htmlhttps://patchthecve.com/cve/CVE-2024-22549.htmlWed, 17 Jun 2026 07:11:33 +0000MEDIUM 5.4: FlyCms 1.0 is vulnerable to Cross Site Scripting (XSS) in the email settings of the website settings section.CVE-2024-22548: FlyCms 1.0 is vulnerable to Cross Site Scripting (XSS) in the system website settings website name section.https://patchthecve.com/cve/CVE-2024-22548.htmlhttps://patchthecve.com/cve/CVE-2024-22548.htmlWed, 17 Jun 2026 07:11:32 +0000MEDIUM 5.4: FlyCms 1.0 is vulnerable to Cross Site Scripting (XSS) in the system website settings website name section.CVE-2023-52074: FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component system/site/webconhttps://patchthecve.com/cve/CVE-2023-52074.htmlhttps://patchthecve.com/cve/CVE-2023-52074.htmlWed, 17 Jun 2026 06:42:01 +0000HIGH 8.8: FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component system/site/webconfig_updagte.CVE-2023-52073: FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /system/site/confihttps://patchthecve.com/cve/CVE-2023-52073.htmlhttps://patchthecve.com/cve/CVE-2023-52073.htmlWed, 17 Jun 2026 06:42:01 +0000HIGH 8.8: FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /system/site/config_footer_updagte.CVE-2023-52072: FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /system/site/userchttps://patchthecve.com/cve/CVE-2023-52072.htmlhttps://patchthecve.com/cve/CVE-2023-52072.htmlWed, 17 Jun 2026 06:42:00 +0000HIGH 8.8: FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /system/site/userconfig_updagte.CVE-2024-21732: FlyCms through abbaa5a allows XSS via the permission management feature.https://patchthecve.com/cve/CVE-2024-21732.htmlhttps://patchthecve.com/cve/CVE-2024-21732.htmlWed, 17 Jun 2026 07:10:02 +0000MEDIUM 6.1: FlyCms through abbaa5a allows XSS via the permission management feature.