Search results

Specified key was too long; max key length is 1000 bytes

Status: Open.

#18 In dromara/ujcms;

· UIWP0 opened on Aug 15, 2025

Safer - Compatible Updates to Fix Vulnerable Dependencies

Status: Open.

#17 In dromara/ujcms;

· safer-bot opened on Jul 16, 2025

A stored XSS vulnerability exists in the file template editing of ujcms_v9.7.5.

Status: Open.

#14 In dromara/ujcms;

· IceFoxH opened on Feb 26, 2025

The file upload feature of UJCMS_v9.7.5 has a stored XSS vulnerability.

Status: Open.

#13 In dromara/ujcms;

· IceFoxH opened on Feb 25, 2025

The ZIP upload feature of UJCMS_v9.7.5 has a stored XSS vulnerability.

Status: Open.

#12 In dromara/ujcms;

· IceFoxH opened on Feb 25, 2025

Stored XSS via file SVG uploads in UJCMS 9.6.3 allows for JWT theft

Status: Open.

#11 In dromara/ujcms;

· cydtseng opened on Dec 12, 2024

Open Redirect Vulnerability in UJCMS 9.6.3 Leads to JWT Theft

Status: Open.

#10 In dromara/ujcms;

· cydtseng opened on Dec 12, 2024

Insecure Direct Object Reference (IDOR) in UJCMS 9.6.3 Allows Username Enumeration via User ID manipulation

Status: Open.

#9 In dromara/ujcms;

· cydtseng opened on Dec 12, 2024

Ujcms v8.0.2 has a vulnerability that upload a pdf file with hidden Cross Site Scripting (XSS).

Status: Open.

#8 In dromara/ujcms;

· Phantom4me opened on Dec 18, 2023

Ujcms v8.0.2 has a vulnerability that attacker could spoofing servers with IP addresses.

Status: Open.

#7 In dromara/ujcms;

· Phantom4me opened on Dec 17, 2023