CVE-2025-15094 | sunkaifei FlyCMS up to abbaa5a8daefb146ad4d61027035026b052cb414 User Login UserController.java userLogin redirectUrl cross site scripting (Issue 16)

A vulnerability classified as problematic was found in sunkaifei FlyCMS up to abbaa5a8daefb146ad4d61027035026b052cb414. The impacted element is the function userLogin of the file src/main/java/com/flycms/web/front/UserController.java of the component User Login. Executing manipulation of the argument redirectUrl can lead to cross site scripting.

This vulnerability is tracked as CVE-2025-15094. The attack can be launched remotely. Moreover, an exploit is present.

This product does not use versioning. This is why information about affected and unaffected releases are unavailable.

The project was informed of the problem early through an issue report but has not responded yet.