5.1
Moyenne
CVE-2026-78140 A flaw has been found in Dromara UJCMS up to 10.1.3
Description
A flaw has been found in Dromara UJCMS up to 10.1.3. The impacted element is the function update of the file src/main/java/com/ujcms/cms/ext/web/backendapi/WebFileTemplateController.java of the component web-file-template Endpoint. Executing a manipulation can lead to improper neutralization of special elements used in a template engine. The attack can be launched remotely. The exploit has been published and may be used.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| UJCMS 10.1 | 10.1.0 → 10.1.3 | Pas de correctif indiqué |
Autres CVE de UJCMS
Les 7 CVE de UJCMS →
CVE-2026-93961
A security flaw has been discovered in Dromara UJCMS up to 12.3.1
6.9
Moyenne
CVE-2026-2954
A vulnerability was found in Dromara UJCMS 10.0.2
5.3
Moyenne
CVE-2026-2953
A vulnerability has been found in Dromara UJCMS 101.2
5.3
Moyenne
CVE-2025-2491
A vulnerability classified as problematic has been found in Dromara ujcms 9.7.5
4.8
Moyenne