ujcms vulnerabilities

Products

• ujcms 9
• jspxcms 2

Latest ujcms CVEs

Newest publication first

1. CVE-2026-93961 Dromara UJCMS UserController UserController.java usernameExist improper authorization

   Published 2026-09-20

   Medium·CVSS 6.9

   A security flaw has been discovered in Dromara UJCMS up to 12.3.1. The affected element is the function usernameExist of the file ujcms-cms/src/main/java/com/ujcms/cms/core/web/api/UserController.java of the component UserController. Performing a manipulation of the argument User...

2. CVE-2026-78140 Dromara UJCMS web-file-template Endpoint WebFileTemplateController.java update special elements in template engine

   Published 2026-08-23

   Medium·CVSS 5.1

   A flaw has been found in Dromara UJCMS up to 10.1.3. The impacted element is the function update of the file src/main/java/com/ujcms/cms/ext/web/backendapi/WebFileTemplateController.java of the component web-file-template Endpoint. Executing a manipulation can lead to improper ne...

3. CVE-2026-2954 Dromara UJCMS ImportDataController import-channel importChanel injection

   Published 2026-02-22

   Medium·CVSS 5.3

   A vulnerability was found in Dromara UJCMS 10.0.2. Impacted is the function importChanel of the file /api/backend/ext/import-data/import-channel of the component ImportDataController. Performing a manipulation of the argument driverClassName/url results in injection. It is possib...

4. CVE-2026-2953 Dromara UJCMS Template WebFileTemplateController.delete deleteDirectory path traversal

   Published 2026-02-22

   Medium·CVSS 5.3

   A vulnerability has been found in Dromara UJCMS 101.2. This issue affects the function deleteDirectory of the file WebFileTemplateController.delete of the component Template Handler. Such manipulation leads to path traversal. The attack may be performed from remote. The exploit h...

5. CVE-2023-3231 UJCMS ZIP Package information disclosure

   Published 2023-06-14

   Medium·CVSS 6.5

   A vulnerability has been found in UJCMS up to 6.0.2 and classified as problematic. This vulnerability affects unknown code of the component ZIP Package Handler. The manipulation of the argument dir leads to information disclosure. The attack can be initiated remotely. The complex...

6. CVE-2023-34747 File upload vulnerability in ujcms 6.0.2 via /api/backend/core/web-file-upload/upload.

   Published 2023-06-14

   Critical·CVSS 9.8

   File upload vulnerability in ujcms 6.0.2 via /api/backend/core/web-file-upload/upload.

7. CVE-2023-34865 Directory traversal vulnerability in ujcms 6.0.2 allows attackers to move files via the rename feature.

   Published 2023-06-14

   Critical·CVSS 9.8

   Directory traversal vulnerability in ujcms 6.0.2 allows attackers to move files via the rename feature.

8. CVE-2023-34878 An issue was discovered in Ujcms v6.0.2 allows attackers to gain sensitive information via the dir parameter to /api/backend/core/web-file-html/download-zip.

   Published 2023-06-14

   High·CVSS 7.5

   An issue was discovered in Ujcms v6.0.2 allows attackers to gain sensitive information via the dir parameter to /api/backend/core/web-file-html/download-zip.

9. CVE-2023-24369 A cross-site scripting (XSS) vulnerability in UJCMS v4.1.3 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the URL parameter under the Add New Articles f...

   Published 2023-02-17

   Medium·CVSS 6.1

   A cross-site scripting (XSS) vulnerability in UJCMS v4.1.3 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the URL parameter under the Add New Articles function.

10. CVE-2022-28090 Jspxcms v10.2.0 allows attackers to execute a Server-Side Request Forgery (SSRF) via /cmscp/ext/collect/fetch_url.do?url=.

    Published 2022-05-04

    Medium·CVSS 6.5

    Jspxcms v10.2.0 allows attackers to execute a Server-Side Request Forgery (SSRF) via /cmscp/ext/collect/fetch_url.do?url=.

11. CVE-2022-23329 A vulnerability in ${"freemarker.template.utility.Execute"?new() of UJCMS Jspxcms v10.2.0 allows attackers to execute arbitrary commands via uploading malicious files.

    Published 2022-02-04

    Critical·CVSS 9.8

    A vulnerability in ${"freemarker.template.utility.Execute"?new() of UJCMS Jspxcms v10.2.0 allows attackers to execute arbitrary commands via uploading malicious files.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.