Login Request a demo
JS
Product
Jspxcms
by Ujcms · last CVE Feb 21, 2025
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 1High 0Medium 5Low 0
Severity
All severities6Critical1High0Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Jspxcms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-23329
9.8
14%
Feb 4
A vulnerability in ${"freemarker.template.utility.Execute"?new() of UJCMS Jspxcms v10.2.0 allows attackers to execute arbitrary commands via uploading malicious files
Affected: 10.2.0
CVE-2022-28090
6.5
1%
May 4
Jspxcms v10.2.0 allows attackers to execute a Server-Side Request Forgery (SSRF) via /cmscp/ext/collect/fetch_url.do?url=
Affected: 10.2.0
CVE-2024-1257
6.1
0%
Feb 6
Jspxcms find_text.do cross site scripting
Affected: 10.2.0
CVE-2024-0599
5.4
1%
Jan 16
Jspxcms Document Management Page InfoController.java cross site scripting
Affected: 10.2.0
CVE-2025-25772
5.1
0%
Feb 21
A Cross-Site Request Forgery (CSRF) in the component /back/UserController.java of Jspxcms v9.0 to v9.5 allows attackers to arbitrarily add Administrator accounts via a crafted…
Affected: 9.0.0 through 9.5.0
CVE-2024-1256
4.3
1%
Feb 6
Jspxcms filter_text.do cross site scripting
Affected: 10.2.0
Showing 6