Dromara UJCMS vulnerabilities
7 published CVEs name Dromara UJCMS among the affected products.
- Published CVEs
- 7
- Last 12 months
- 4
- Critical
- 0
- Known exploited
- 0
Critical 0High 0Medium 7Low 0Not scored 0
CVEs per yearBy the year they were published
- 20241
- 20252
- 20264
Newest CVEs
- CVE-2026-93961
Dromara UJCMS UserController UserController.java usernameExist improper authorization
Dromara · UJCMS
Medium6.9 - CVE-2026-78140
Dromara UJCMS web-file-template Endpoint WebFileTemplateController.java update special elements in template engine
Dromara · UJCMS
Medium5.1 - CVE-2026-2954
Dromara UJCMS ImportDataController import-channel importChanel injection
Dromara · UJCMS
Medium5.3 - CVE-2026-2953
Dromara UJCMS Template WebFileTemplateController.delete deleteDirectory path traversal
Dromara · UJCMS
Medium5.3 - CVE-2025-2491
Dromara ujcms Edit Template File Page WebFileTemplateController.java update cross site scripting
Dromara · ujcms
Medium4.8 - CVE-2025-2490
Dromara ujcms File Upload WebFileUploadController.java upload cross site scripting
Dromara · ujcms
Medium4.8 - CVE-2024-12483
Dromara UJCMS User ID id authorization
Dromara · UJCMS
Medium6.3