CVE-2024-27694: Flycms Project Flycms

High severity, CVSS 7.4. EPSS: 0.2% chance of exploitation in the next 30 days.

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the /system/share/ztree_category_edit.

Affected products

• Flycms Project Flycms: version 1.0 only

Published 2024-03-04. Last modified 2026-06-17.