Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Flycms Project

First CVE: Apr 1, 2021Active for: 5 yearsTotal CVEs: 19
49.0
VTI Score
High

Flycms Project maintains a focused content-management system that appears in the vulnerability landscape as a niche but moderately tracked platform. The recurring weakness classes—cross-site request forgery, cross-site scripting, and server-side request forgery—reflect the input-handling and request-validation challenges endemic to web-based CMS applications. Current severity, exploitation, and exposure counts are shown alongside this summary.

FAUCET AI Generated
19
Total CVEs
More Total CVEs than 96% of tracked vendors
6.3
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 98% of tracked vendors
8.2
Avg CVSS Score
Higher Avg CVSS Score than 80% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Flycms Project over time

Volume of CVEsAvg CVSS Base Score
First CVE
Apr 1, 2021
5 years ago
Most Recent CVE
Mar 4, 2024
872 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (19 CVEs).

19 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2020-36065HIGH
Cross Site Request Forgery (CSRF) vulnerability in FlyCms 1.0 allows attackers to add arbitrary administrator accounts via system/admin/admin_save.
May 8, 20238.827NONO
CVE-2024-22819HIGH
FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/email/email_templets_update.
Jan 18, 20248.824NONO
CVE-2024-22818HIGH
FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerbility via /system/site/filterKeyword_save
Jan 18, 20248.824NONO
CVE-2024-22817HIGH
FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/email/email_conf_updagte
Jan 18, 20248.824NONO
CVE-2024-22603HIGH
FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/links/add_link
Jan 18, 20248.824NONO
CVE-2024-22601HIGH
FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/score/scorerule_save
Jan 18, 20248.824NONO
CVE-2024-22699HIGH
FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/admin/update_group_save.
Jan 18, 20248.824NONO
CVE-2024-22593HIGH
FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/admin/add_group_save
Jan 18, 20248.824NONO
CVE-2024-22592HIGH
FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/user/group_update
Jan 18, 20248.824NONO
CVE-2024-22591HIGH
FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/user/group_save.
Jan 18, 20248.824NONO
View all 19 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products19 CVEs
16%
84%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network19 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low19 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None2 (10.5%)
Unknown0 (0.0%)
Required17 (89.5%)
Privileges Required
Low3 (15.8%)
High0 (0.0%)
None16 (84.2%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (19 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Flycms Project.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Flycms Project — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Flycms Project's Products

View all 1 CNAs →

Top CWEs