fiyo fiyo cms

Name: fiyo fiyo cms
Brand: fiyo

productUS

cpe:2.3:a:fiyo:fiyo_cms:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

13critical8high5medium0low

updated 2026-10-27

vulnerabilities (26)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2014-9148US	critical9.8	11.4% (96th)	Exploit	no fix	2017-10-16	≤ 2.0.1.8
CVE-2014-9147US	high7.5	11.4% (96th)	Exploit	no fix	2017-10-16	≤ 2.0.1.8
CVE-2017-6823US	high8.8OT high	8.04% (95th)	Exploit	no fix	2017-03-12	= 2.0.6.1
CVE-2015-3934US	critical9.8	3.07% (88th)	Exploit	no fix	2017-11-21	= 2.0.1.9.1
CVE-2014-9146US	medium4.3	2.52% (85th)	Exploit	no fix	2015-04-14	= 2.0.1.8
CVE-2014-9145US	high7.5	2.07% (81st)	Exploit	no fix	2015-04-14	= 2.0.1.8
CVE-2017-7625US	critical9.8	3.16% (88th)	—	no fix	2017-04-10	6 versions
CVE-2014-4032US	medium4.3	1.85% (79th)	—	no fix	2014-06-11	= 1.5.7
CVE-2017-11630US	high7.5	1.77% (78th)	—	no fix	2017-07-26	= 2.0.7
CVE-2017-17104US	high7.5	1.70% (77th)	—	no fix	2017-12-04	= 2.0.7
CVE-2017-8853US	high7.5	1.43% (73rd)	—	no fix	2017-05-09	= 2.0.7
CVE-2017-17103US	high8.8	1.18% (68th)	—	no fix	2017-12-04	= 2.0.7
CVE-2017-17102US	high7.5	1.08% (65th)	—	no fix	2017-12-04	= 2.0.7
CVE-2017-11631US	critical9.8	1.04% (64th)	—	no fix	2017-07-26	= 2.0.7
CVE-2017-11417US	critical9.8	1.02% (63rd)	—	no fix	2017-07-18	= 2.0.7
CVE-2017-11413US	critical9.8	1.02% (63rd)	—	no fix	2017-07-18	= 2.0.7
CVE-2017-11419US	critical9.8	0.99% (62nd)	—	no fix	2017-07-18	= 2.0.7
CVE-2017-11418US	critical9.8	0.99% (62nd)	—	no fix	2017-07-18	= 2.0.7
CVE-2017-11416US	critical9.8	0.99% (62nd)	—	no fix	2017-07-18	= 2.0.7
CVE-2017-11415US	critical9.8	0.99% (62nd)	—	no fix	2017-07-18	= 2.0.7
CVE-2017-11414US	critical9.8	0.99% (62nd)	—	no fix	2017-07-18	= 2.0.7
CVE-2017-11412US	critical9.8	0.99% (62nd)	—	no fix	2017-07-18	= 2.0.7
CVE-2017-11354US	critical9.8	0.99% (62nd)	—	no fix	2017-07-17	= 2.0.7
CVE-2018-18545US	medium6.1	0.81% (57th)	—	no fix	2018-10-21	= 2.0.7
CVE-2020-35373US	medium6.1	0.69% (53rd)	—	no fix	2021-06-17	= 2.0.6.1
CVE-2017-13778US	medium6.1	0.60% (49th)	—	no fix	2017-08-30	= 2.0.7

weaknesses (7)

The flaw types (CWEs) most of these CVEs share.

CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')14 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-284Improper Access Control1 CVEs
CWE-294Authentication Bypass by Capture-replay1 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE26 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan