Login Request a demo
UJ
Product
UJCMS
by Dromara · last CVE Sep 20, 2026
16
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities16In the news0Timeline
Severity mix
Critical 5High 1Medium 10Low 0
Severity
All severities16Critical5High1Medium10Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add UJCMS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-2954
9.8
0%
Feb 22
Dromara UJCMS ImportDataController import-channel importChanel injection
Affected: 10.0.2
CVE-2023-51350
9.8
1%
Jan 11
A spoofing attack in ujcms v.8.0.2 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted script to the X-Forwarded-For function in the…
Affected: 8.0.2
CVE-2023-34865
9.8
1%
Jun 14
Directory traversal vulnerability in ujcms 6.0.2 allows attackers to move files via the rename feature
Affected: 6.0.2
CVE-2023-34747
9.8
20%
Jun 14
File upload vulnerability in ujcms 6.0.2 via /api/backend/core/web-file-upload/upload
Affected: 6.0.2
CVE-2026-2953
9.1
1%
Feb 22
Dromara UJCMS Template WebFileTemplateController.delete deleteDirectory path traversal
Affected: 101.2
Showing 5