Skip to content
OpenAdvisories

Product · dromara

UJCMS

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 2.4
    CVE-2025-2491

    Dromara ujcms Edit Template File Page WebFileTemplateController.java update cross site scripting

    A vulnerability classified as problematic has been found in Dromara ujcms 9.7.5. This affects the function update of the file /main/java/com/ujcms/cms/ext/web/backendapi/WebFileTemplateController.java of the component Edit Template File Page. The manipulation…

    dromara UJCMS
  • Low 2.4
    CVE-2025-2490

    Dromara ujcms File Upload WebFileUploadController.java upload cross site scripting

    A vulnerability was found in Dromara ujcms 9.7.5. It has been rated as problematic. Affected by this issue is the function uploadZip/upload of the file /main/java/com/ujcms/cms/ext/web/backendapi/WebFileUploadController.java of the component File Upload. The …

    dromara UJCMS
  • Low 3.7
    CVE-2024-12483 Public exploit

    Dromara UJCMS User ID id authorization

    A vulnerability classified as problematic has been found in Dromara UJCMS up to 9.6.3. This affects an unknown part of the file /users/id of the component User ID Handler. The manipulation leads to authorization bypass. It is possible to initiate the attack r…

    dromara UJCMS