VendorsUJCMSjspxcms10.2.0
Vulnerabilities

UJCMS Jspxcms 10.2.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2022-23329
A vulnerability in ${"freemarker.template.utility.Execute"?new() of UJCMS Jspxcms v10.2.0 allows attackers to execute arbitrary commands via uploading malicious files.
Published 2022-02-04 · Modified
9.8EPSS 0.144
CVE-2022-28090
Jspxcms v10.2.0 allows attackers to execute a Server-Side Request Forgery (SSRF) via /cmscp/ext/collect/fetch_url.do?url=.
Published 2022-05-04 · Modified
6.5EPSS 0.011
CVE-2024-1257
Jspxcms find_text.do cross site scripting
Published 2024-02-06 · Modified
6.1EPSS 0.005
CVE-2024-0599
Jspxcms Document Management Page InfoController.java cross site scripting
Published 2024-01-16 · Modified
5.4EPSS 0.005
CVE-2024-1256
Jspxcms filter_text.do cross site scripting
Published 2024-02-06 · Modified
4.3EPSS 0.006