All 6 CVE vulnerabilities found in UJCMS, with AI-generated Chinese analysis, references, and POCs.
Vendor: n/a
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-2954 | Dromara UJCMS ImportDataController import-channel importChanel injection CWE-74 | 6.3 | Medium | 2026-02-22 |
| CVE-2026-2953 | Dromara UJCMS Template WebFileTemplateController.delete deleteDirectory path traversal CWE-22 | 5.4 | Medium | 2026-02-22 |
| CVE-2025-2491 | Dromara ujcms Edit Template File Page WebFileTemplateController.java update cross site scripting CWE-79 | 2.4 | Low | 2025-03-18 |
| CVE-2025-2490 | Dromara ujcms File Upload WebFileUploadController.java upload cross site scripting CWE-79 | 2.4 | Low | 2025-03-18 |
| CVE-2024-12483 | Dromara UJCMS User ID id authorization CWE-639 | 3.7 | Low | 2024-12-11 |
| CVE-2023-3231 | UJCMS ZIP Package information disclosure CWE-200 | 3.1 | Low | 2023-06-14 |
All 6 known CVE vulnerabilities affecting UJCMS with full Chinese analysis, references, and POCs where available.