See how flycms project compares to other vendors in security performance
FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the /system/share/ztreecategoryedit.
FlyCms 1.0 is vulnerable to Cross Site Scripting (XSS) in the email settings of the website settings section.
FlyCms 1.0 is vulnerable to Cross Site Scripting (XSS) in the system website settings website name section.
FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/score/del.
FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/user/groupupdate
FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/admin/addgroupsave
FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/user/groupsave.
FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/admin/updategroupsave.
FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerbility via /system/site/filterKeywordsave
FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/email/emailconfupdagte
FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/email/emailtempletsupdate.
FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/links/addlink
FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/score/scorerulesave
FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /system/site/userconfigupdagte.
FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component system/site/webconfigupdagte.
FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /system/site/configfooterupdagte.
FlyCms through abbaa5a allows XSS via the permission management feature.
Cross Site Request Forgery (CSRF) vulnerability in FlyCms 1.0 allows attackers to add arbitrary administrator accounts via system/admin/adminsave.
Server Side Request Forgery (SSRF) vulnerability in saveUrlAs function in ImagesService.java in sunkaifei FlyCMS version 20190503.