Ujcms is a content management system with a modest product footprint centered around its namesake platform and related offerings such as JSPXCMS, deployed across a recognizable presence in web-publishing contexts. Despite its narrow product line, the vendor's vulnerability disclosures skew strongly toward critical-severity outcomes and concentrate in weakness classes endemic to web applications: cross-site scripting, unrestricted file uploads, code injection, and path traversal that together reflect inadequate input validation and access controls across the CMS framework. These weakness classes are durable vectors in file-upload and templating systems and recur because they reflect fundamental design and vetting challenges in user-facing content platforms. Defenders should prioritize patching this vendor's releases given the critical-severity tendency and treat exposed instances as high-risk, particularly those allowing file uploads or dynamic content generation. Current exploitation activity and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Ujcms over time
Signals from CVEs in this vendor scope (20 CVEs).
20 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-23329CRITICAL A vulnerability in ${"freemarker.template.utility.Execute"?new() of UJCMS Jspxcms v10.2.0 allows attackers to execute arbitrary commands via uploading malicious files. | Feb 4, 2022 | 9.8 | 37 | NO | NO |
CVE-2023-34747CRITICAL File upload vulnerability in ujcms 6.0.2 via /api/backend/core/web-file-upload/upload. | Jun 14, 2023 | 9.8 | 35 | NO | NO |
CVE-2026-2954CRITICAL A vulnerability was found in Dromara UJCMS 10.0.2. Impacted is the function importChanel of the file /api/backend/ext/import-data/import-channel of the component ImportDataControll | Feb 22, 2026 | 9.8 | 30 | NO | NO |
CVE-2026-2953CRITICAL A vulnerability has been found in Dromara UJCMS 101.2. This issue affects the function deleteDirectory of the file WebFileTemplateController.delete of the component Template Handle | Feb 22, 2026 | 9.1 | 28 | NO | NO |
CVE-2024-12483MEDIUM A vulnerability classified as problematic has been found in Dromara UJCMS up to 9.6.3. This affects an unknown part of the file /users/id of the component User ID Handler. The mani | Dec 12, 2024 | 5.9 | 28 | NO | YES |
CVE-2023-51350CRITICAL A spoofing attack in ujcms v.8.0.2 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted script to the X-Forwarded-For function in the h | Jan 11, 2024 | 9.8 | 25 | NO | NO |
CVE-2023-34865CRITICAL Directory traversal vulnerability in ujcms 6.0.2 allows attackers to move files via the rename feature. | Jun 14, 2023 | 9.8 | 25 | NO | NO |
CVE-2022-28090MEDIUM Jspxcms v10.2.0 allows attackers to execute a Server-Side Request Forgery (SSRF) via /cmscp/ext/collect/fetch_url.do?url=. | May 4, 2022 | 6.5 | 22 | NO | NO |
CVE-2023-24369MEDIUM A cross-site scripting (XSS) vulnerability in UJCMS v4.1.3 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the URL parameter under th | Feb 17, 2023 | 6.1 | 21 | NO | NO |
CVE-2023-34878HIGH An issue was discovered in Ujcms v6.0.2 allows attackers to gain sensitive information via the dir parameter to /api/backend/core/web-file-html/download-zip. | Jun 14, 2023 | 7.5 | 20 | NO | NO |
Signals from CVEs in this vendor scope (20 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Ujcms.
Media articles that mention a CVE ID that affects a product developed by Ujcms — matched by CVE ID, not by vendor name.