CVE-2021-37262: Jflyfox Jfinal CMS

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

JFinal_cms 5.1.0 is vulnerable to regex injection that may lead to Denial of Service.

Affected products

• Jflyfox Jfinal CMS: version 5.1.0 only

Published 2021-12-16. Last modified 2026-06-17.