CVE-2025-15093: sunkaifei FlyCMS Admin Login IndexAdminController.java cross site scripting
A security flaw has been discovered in sunkaifei FlyCMS up to abbaa5a8daefb146ad4d61027035026b052cb414. The affected element is an unknown function of the file src/main/java/com/flycms/web/system/IndexAdminController.java of the component Admin Login. Performing a manipulation of the argument redirectUrl results in cross site scripting. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15093?
The severity of CVE-2025-15093 has yet to be publicly rated, but it poses a significant risk due to the component's vulnerabilities in Admin Login.
What components are affected by CVE-2025-15093?
CVE-2025-15093 affects the sunkaifei FlyCMS versions up to abbaa5a8daefb146ad4d61027035026b052cb414.
How do I fix CVE-2025-15093?
To fix CVE-2025-15093, upgrade to a patched version of sunkaifei FlyCMS that addresses the vulnerability.
What is the impact of CVE-2025-15093?
CVE-2025-15093 may allow unauthorized access or manipulation of the system through the Admin Login.
When was CVE-2025-15093 discovered?
CVE-2025-15093 was discovered recently but lacks specifics on its disclosure date.