Dromara UJCMS

• CVE-2026-93961 Medium 5.3 Dromara UJCMS UserController UserController.java usernameExist improper authorization 0.6%
• CVE-2026-78140 Medium 4.7 Dromara UJCMS web-file-template Endpoint WebFileTemplateController.java update special elements in template engine 0.4%
• CVE-2026-2954 Medium 6.3 Dromara UJCMS ImportDataController import-channel importChanel injection 0.4%
• CVE-2026-2953 Medium 5.4 Dromara UJCMS Template WebFileTemplateController.delete deleteDirectory path traversal 0.9%
• CVE-2025-2491 Low 2.4 Dromara ujcms Edit Template File Page WebFileTemplateController.java update cross site scripting 0.3%
• CVE-2025-2490 Low 2.4 Dromara ujcms File Upload WebFileUploadController.java upload cross site scripting 0.3%
• CVE-2024-12483 Low 3.7 Dromara UJCMS User ID id authorization 3.6%