Product by Dromara
Dromara UJCMS
7 known vulnerabilities in Dromara UJCMS (Dromara), 0 of them actively exploited (CISA KEV).
Key figures
7
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2024-12483 | Dromara UJCMS User ID id authorization | 3.7 | |
| Medium | CVE-2026-93961 | Dromara UJCMS UserController UserController.java usernameExist improper authorization | 5.3 | |
| Critical | CVE-2026-2953 | Dromara UJCMS Template WebFileTemplateController.delete deleteDirectory path traversal | 5.4 | |
| Medium | CVE-2026-78140 | Dromara UJCMS: Improper Neutralization of Special Elements Used in a Template Engine | 4.7 | |
| Critical | CVE-2026-2954 | Dromara UJCMS ImportDataController import-channel importChanel injection | 6.3 | |
| Medium | CVE-2025-2491 | Dromara ujcms Edit Template File Page WebFileTemplateController.java update cross site scripting | 2.4 | |
| Medium | CVE-2025-2490 | Dromara ujcms File Upload WebFileUploadController.java upload cross site scripting | 2.4 |