dromara/ujcms

View on GitHub

Java开源网站内容管理系统(java cms)。使用SpringBoot、MyBatis、Spring Security、Lucene、FreeMarker、TypeScript、Vue3、ElementPlus等技术开发。

Stars: 665
Forks: 114
Open beginner issues: 0
Indexed issues: 13

Dominant language: Java
License: GPL-3.0
Last GitHub push: Sep 2, 2026
Latest indexed: Sep 15, 2026
Contributing guide: No contributing guide
Code of conduct: No code of conduct
Beginner labels: No beginner labels indexed
PR merge metrics: No merged PRs in 30d

Open All

13 open issues indexed

Ujcms v8.0.2 has a vulnerability that attacker could spoofing servers with IP addresses. Open

dromara/ujcms#7 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Ujcms v8.0.2 has a vulnerability that upload a pdf file with hidden Cross Site Scripting (XSS). Open

dromara/ujcms#8 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Insecure Direct Object Reference (IDOR) in UJCMS 9.6.3 Allows Username Enumeration via User ID manipulation Open

dromara/ujcms#9 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Open Redirect Vulnerability in UJCMS 9.6.3 Leads to JWT Theft Open

dromara/ujcms#10 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Stored XSS via file SVG uploads in UJCMS 9.6.3 allows for JWT theft Open

dromara/ujcms#11 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
The ZIP upload feature of UJCMS_v9.7.5 has a stored XSS vulnerability. Open

dromara/ujcms#12 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
The file upload feature of UJCMS_v9.7.5 has a stored XSS vulnerability. Open

dromara/ujcms#13 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
A stored XSS vulnerability exists in the file template editing of ujcms_v9.7.5. Open

dromara/ujcms#14 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Safer - Compatible Updates to Fix Vulnerable Dependencies Open

dromara/ujcms#17 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Specified key was too long; max key length is 1000 bytes Open

dromara/ujcms#18 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
how to use redis? Open

dromara/ujcms#19 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
where is log path? Open

dromara/ujcms#20 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
ujcms 存在用户名枚举漏洞 Open

dromara/ujcms#22 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026

dromara/ujcms

Get new issues in your inbox