Skycaiji is a web-scraping and content-aggregation platform whose vulnerability profile concentrates in a narrow product line but ranks prominently in its niche. The vendor's disclosures skew strongly toward critical-severity outcomes and recur across input-handling and access-control weakness classes, including cross-site scripting, cross-site request forgery, untrusted deserialization, special-element injection, and improper access control—flaws characteristic of web-facing applications with complex request parsing and privilege logic. Defenders deploying or exposing this platform should prioritize patching critical disclosures; current severity and exploitation counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Skycaiji over time
Signals from CVEs in this vendor scope (11 CVEs).
11 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-28096HIGH Skycaiji v2.4 was discovered to contain a remote code execution (RCE) vulnerability via /SkycaijiApp/admin/controller/Develop.php. | May 4, 2022 | 7.2 | 33 | NO | NO |
CVE-2022-44351CRITICAL Skycaiji v2.5.1 was discovered to contain a deserialization vulnerability via /SkycaijiApp/admin/controller/Mystore.php. | Dec 7, 2022 | 9.8 | 31 | NO | NO |
CVE-2025-1791CRITICAL A vulnerability has been found in Zorlan SkyCaiji 2.9 and classified as critical. This vulnerability affects the function fileAction of the file vendor/skycaiji/app/admin/controlle | Mar 1, 2025 | 9.8 | 28 | NO | NO |
CVE-2024-39243CRITICAL An issue discovered in skycaiji 2.8 allows attackers to run arbitrary code via crafted POST request to /index.php?s=/admin/develop/editor_save. | Jun 26, 2024 | 9.8 | 25 | NO | NO |
CVE-2018-11371HIGH SkyCaiji 1.2 allows CSRF to add an Administrator user. | May 22, 2018 | 8.8 | 25 | NO | NO |
CVE-2020-18878MEDIUM Directory Traversal in Skycaiji v1.3 allows remote attackers to obtain sensitive information via the component 'index.php?m=admin&c=Tool&a=log&file=D%3A%5CphpStudy%5CWWW%5Cindex.ph | Aug 20, 2021 | 5.3 | 21 | NO | NO |
CVE-2025-1799MEDIUM A vulnerability, which was classified as critical, was found in Zorlan SkyCaiji 2.9. This affects the function previewAction of the file vendor/skycaiji/app/admin/controller/Tool.p | Mar 1, 2025 | 6.3 | 20 | NO | NO |
CVE-2024-39242MEDIUM A cross-site scripting (XSS) vulnerability in skycaiji v2.8 allows attackers to execute arbitrary web scripts or HTML via a crafted payload using eval(String.fromCharCode()). | Jun 26, 2024 | 6.1 | 18 | NO | NO |
CVE-2024-39241MEDIUM Cross Site Scripting (XSS) vulnerability in skycaiji 2.8 allows attackers to run arbitrary code via /admin/tool/preview. | Jun 26, 2024 | 6.1 | 18 | NO | NO |
CVE-2024-6252MEDIUM A vulnerability has been found in Zorlan SkyCaiji up to 2.8 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Task Handler. | Jun 22, 2024 | 6.1 | 18 | NO | NO |
Signals from CVEs in this vendor scope (11 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Skycaiji.
Media articles that mention a CVE ID that affects a product developed by Skycaiji — matched by CVE ID, not by vendor name.