Dromara UJCMS vulnerabilities
7 published CVEs name Dromara UJCMS among the affected products.
- 7Published CVEs7 of them scored
- 4Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-93961
Dromara UJCMS UserController UserController.java usernameExist improper authorization
Dromara · UJCMS
Medium6.9 - CVE-2026-78140
Dromara UJCMS web-file-template Endpoint WebFileTemplateController.java update special elements in template engine
Dromara · UJCMS
Medium5.1 - CVE-2026-2954
Dromara UJCMS ImportDataController import-channel importChanel injection
Dromara · UJCMS
Medium5.3 - CVE-2026-2953
Dromara UJCMS Template WebFileTemplateController.delete deleteDirectory path traversal
Dromara · UJCMS
Medium5.3 - CVE-2025-2491
Dromara ujcms Edit Template File Page WebFileTemplateController.java update cross site scripting
Dromara · ujcms
Medium4.8 - CVE-2025-2490
Dromara ujcms File Upload WebFileUploadController.java upload cross site scripting
Dromara · ujcms
Medium4.8 - CVE-2024-12483
Dromara UJCMS User ID id authorization
Dromara · UJCMS
Medium6.3