jfinal CMS 5.1.0 has an arbitrary file read vulnerability.
- https://github.com/jflyfox/jfinal_cms/issues/57
No PoCs found on GitHub currently.