Ujcms vulnerabilities

Products

• Ujcms 14
• Jspxcms 6

Newest

• dromara ujcms Dromara UJCMS ImportDataController import-channel importChanel injection CVE-2026-2954 5.3 MediumFebruary 22, 2026
• dromara ujcms Dromara UJCMS Template WebFileTemplateController.delete deleteDirectory path traversal CVE-2026-2953 5.3 MediumFebruary 22, 2026
• dromara ujcms Dromara ujcms Edit Template File Page WebFileTemplateController.java update cross site scripting CVE-2025-2491 4.8 MediumMarch 18, 2025
• dromara ujcms Dromara ujcms File Upload WebFileUploadController.java upload cross site scripting CVE-2025-2490 4.8 MediumMarch 18, 2025
• ujcms jspxcms A Cross-Site Request Forgery (CSRF) in the component /back/UserController.java of Jspxcms v9.0 to... CVE-2025-25772 5.1 MediumFebruary 21, 2025
• ujcms A URL redirection vulnerability exists in UJCMS 9.6.3 due to improper validation of URLs in the... CVE-2024-55452 5.4 MediumDecember 16, 2024
• ujcms A Stored Cross-Site Scripting (XSS) vulnerability exists in authenticated SVG file upload and... CVE-2024-55451 4.8 MediumDecember 16, 2024
• dromara ujcms Dromara UJCMS User ID id authorization CVE-2024-12483 Public exploit 6.3 MediumDecember 11, 2024
• ujcms jspxcms Jspxcms find_text.do cross site scripting CVE-2024-1257 3.5 LowFebruary 6, 2024
• ujcms jspxcms Jspxcms filter_text.do cross site scripting CVE-2024-1256 3.5 LowFebruary 6, 2024
• ujcms jspxcms Jspxcms Document Management Page InfoController.java cross site scripting CVE-2024-0599 3.5 LowJanuary 16, 2024
• ujcms File Upload vulnerability in Ujcms v.8.0.2 allows a local attacker to execute arbitrary code via... CVE-2023-51806 5.4 MediumJanuary 12, 2024
• ujcms A spoofing attack in ujcms v.8.0.2 allows a remote attacker to obtain sensitive information and... CVE-2023-51350 9.8 CriticalJanuary 11, 2024
• dromara ujcms UJCMS ZIP Package information disclosure CVE-2023-3231 3.1 LowJune 14, 2023
• ujcms An issue was discovered in Ujcms v6.0.2 allows attackers to gain sensitive information via the... CVE-2023-34878 7.5 HighJune 14, 2023
• ujcms Directory traversal vulnerability in ujcms 6.0.2 allows attackers to move files via the rename... CVE-2023-34865 9.8 CriticalJune 14, 2023
• ujcms File upload vulnerability in ujcms 6.0.2 via /api/backend/core/web-file-upload/upload. CVE-2023-34747 EPSS 20.0% 9.8 CriticalJune 14, 2023
• ujcms A cross-site scripting (XSS) vulnerability in UJCMS v4.1.3 allows attackers to execute arbitrary... CVE-2023-24369 6.1 MediumFebruary 17, 2023
• ujcms jspxcms Jspxcms v10.2.0 allows attackers to execute a Server-Side Request Forgery (SSRF) via /cmscp/ext... CVE-2022-28090 6.5 MediumMay 4, 2022
• ujcms jspxcms A vulnerability in ${"freemarker.template.utility.Execute"?new() of UJCMS Jspxcms v10.2.0 allows... CVE-2022-23329 EPSS 14.4% 9.8 CriticalFebruary 4, 2022