Skip to content

Jfinalcms Project · weakness class

Cross-Site Request Forgery

19 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 19 is a mark on the map. Named now: 1 to 19, most at risk first.

  1. JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /admin/friend_link/save.CVE-2023-49379Jfinalcms Project · 0.4% likely

    CWE-352

  2. JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via admin/nav/delete.CVE-2023-49448Jfinalcms Project · 0.4% likely

    CWE-352

  3. JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/nav/update.CVE-2023-49447Jfinalcms Project · 0.4% likely

    CWE-352

  4. JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/nav/save.CVE-2023-49446Jfinalcms Project · 0.4% likely

    CWE-352

  5. JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/delete.CVE-2023-49398Jfinalcms Project · 0.4% likely

    CWE-352

  6. JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/updateStatus.CVE-2023-49397Jfinalcms Project · 0.4% likely

    CWE-352

  7. JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/save.CVE-2023-49396Jfinalcms Project · 0.4% likely

    CWE-352

  8. JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/update.CVE-2023-49395Jfinalcms Project · 0.4% likely

    CWE-352

  9. JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/tag/save.CVE-2023-49383Jfinalcms Project · 0.4% likely

    CWE-352

  10. JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/div/delete.CVE-2023-49382Jfinalcms Project · 0.4% likely

    CWE-352

  11. JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/div/update.CVE-2023-49381Jfinalcms Project · 0.4% likely

    CWE-352

  12. JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/friend_link/delete.CVE-2023-49380Jfinalcms Project · 0.4% likely

    CWE-352

  13. JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/form/save.CVE-2023-49378Jfinalcms Project · 0.4% likely

    CWE-352

  14. JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/tag/update.CVE-2023-49377Jfinalcms Project · 0.4% likely

    CWE-352

  15. JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/tag/delete.CVE-2023-49376Jfinalcms Project · 0.4% likely

    CWE-352

  16. JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/friend_link/update.CVE-2023-49375Jfinalcms Project · 0.4% likely

    CWE-352

  17. JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/slide/update.CVE-2023-49374Jfinalcms Project · 0.4% likely

    CWE-352

  18. JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/slide/delete.CVE-2023-49373Jfinalcms Project · 0.4% likely

    CWE-352

  19. JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/slide/save.CVE-2023-49372Jfinalcms Project · 0.4% likely

    CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.