rAthena FluxCP

• CVE-2026-116254 Medium 6.5 rathena FluxCP PayPal IPN PaymentNotifyRequest.php verifyiprange origin validation 0.3%
• CVE-2025-62797 High 8.6 CSRF in FluxCP account endpoints allows account takeover / state-changing actions 0.2%
• CVE-2024-45799 High 7.3 Javascript Injection in Vending Info/Buyers Info Module in FluxCP 0.3%
• CVE-2022-4421 Low 3.5 rAthena FluxCP Service Desk Image URL view.php cross site scripting 0.4%