5.1
Medium
CVE-2026-78140 A flaw has been found in Dromara UJCMS up to 10.1.3
Description
A flaw has been found in Dromara UJCMS up to 10.1.3. The impacted element is the function update of the file src/main/java/com/ujcms/cms/ext/web/backendapi/WebFileTemplateController.java of the component web-file-template Endpoint. Executing a manipulation can lead to improper neutralization of special elements used in a template engine. The attack can be launched remotely. The exploit has been published and may be used.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| UJCMS 10.1 | 10.1.0 → 10.1.3 | No fix stated |
Other CVEs of UJCMS
The 7 CVEs of UJCMS →
CVE-2026-93961
A security flaw has been discovered in Dromara UJCMS up to 12.3.1
6.9
Medium
CVE-2026-2954
A vulnerability was found in Dromara UJCMS 10.0.2
5.3
Medium
CVE-2026-2953
A vulnerability has been found in Dromara UJCMS 101.2
5.3
Medium
CVE-2025-2491
A vulnerability classified as problematic has been found in Dromara ujcms 9.7.5
4.8
Medium