CVE-2021-42242: Jflyfox Jfinal CMS

Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days.

A command execution vulnerability exists in jfinal_cms 5.0.1 via com.jflyfox.component.controller.Ueditor.

Affected products

• Jflyfox Jfinal CMS: version 5.0.1 only

Published 2022-05-05. Last modified 2026-06-17.