CVE-2026-125082

A security flaw has been discovered in sunkaifei FlyCMS up to e71738e0cfb7ffd48c2ce74242a2dbb43f84f25a. Affected by this vulnerability is the function ModelDataService.insertData of the file articles/detail.html of the component Content Rendering. Performing a manipulation of the argument content results in cross site scripting. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The patch is named 714521a9262e7bc9ca5713c873f57e96a4845352. It is recommended to apply a patch to fix this issue.

• CWE-79
• CWE-94

• https://github.com/sunkaifei/FlyCms/
• https://github.com/sunkaifei/FlyCms/commit/714521a9262e7bc9ca5713c873f57e96a4845352
• https://github.com/sunkaifei/FlyCms/issues/18
• https://vuldb.com/cve/CVE-2026-125082
• https://vuldb.com/submit/1041301
• https://vuldb.com/vuln/433192
• https://vuldb.com/vuln/433192/cti

Published

Nov 10, 2026

Last Modified

Nov 10, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-125073FFmpeg through 9.0.2 contains an infinite loop vulnerability…5.5
• CVE-2026-125075A vulnerability has been found in SourceCodester Smart Atten…7.3
• CVE-2026-125076A vulnerability was found in SourceCodester Smart Attendance…7.3
• CVE-2026-125077A vulnerability was determined in SourceCodester Smart Atten…4.3
• CVE-2026-125078A security flaw has been discovered in SourceCodester Smart …6.3
• CVE-2026-125079A vulnerability was determined in D-Link DCS-6501LH 3.03.02.…5.3
• CVE-2026-125086A vulnerability has been found in D-Link M60 1.12.B01. Impac…10
• CVE-2026-125087A vulnerability was found in Michael-A-Kuykendall Shimmy up …7.3
• CVE-2026-125095FFmpeg through 9.0.2 contains an uninitialized memory use vu…3.3
• CVE-2026-125096FFmpeg through 9.0.2 contains an uninitialized memory disclo…3.3
• CVE-2026-125097FFmpeg through 9.0.2 contains an uninitialized memory disclo…3.3
• CVE-2026-125098FFmpeg through 9.0.2 contains an information disclosure vuln…3.3