Issues

• ujcms 存在用户名枚举漏洞

  dromara/ujcms#22 · Filter by author mjh134 opened on Aug 23, 2026

• where is log path?

  dromara/ujcms#20 · Filter by author zhangchunsheng opened on Nov 7, 2025

• how to use redis?

  dromara/ujcms#19 · Filter by author zhangchunsheng opened on Nov 7, 2025

• Specified key was too long; max key length is 1000 bytes

  dromara/ujcms#18 · Filter by author UIWP0 opened on Aug 15, 2025
  1

• Safer - Compatible Updates to Fix Vulnerable Dependencies

  dromara/ujcms#17 · Filter by author safer-bot opened on Jul 16, 2025

• A stored XSS vulnerability exists in the file template editing of ujcms_v9.7.5.

  dromara/ujcms#14 · Filter by author IceFoxH opened on Feb 26, 2025

• The file upload feature of UJCMS_v9.7.5 has a stored XSS vulnerability.

  dromara/ujcms#13 · Filter by author IceFoxH opened on Feb 25, 2025

• The ZIP upload feature of UJCMS_v9.7.5 has a stored XSS vulnerability.

  dromara/ujcms#12 · Filter by author IceFoxH opened on Feb 25, 2025

• Stored XSS via file SVG uploads in UJCMS 9.6.3 allows for JWT theft

  dromara/ujcms#11 · Filter by author cydtseng opened on Dec 12, 2024

• Open Redirect Vulnerability in UJCMS 9.6.3 Leads to JWT Theft

  dromara/ujcms#10 · Filter by author cydtseng opened on Dec 12, 2024

• Insecure Direct Object Reference (IDOR) in UJCMS 9.6.3 Allows Username Enumeration via User ID manipulation

  dromara/ujcms#9 · Filter by author cydtseng opened on Dec 12, 2024

• Ujcms v8.0.2 has a vulnerability that upload a pdf file with hidden Cross Site Scripting (XSS).

  dromara/ujcms#8 · Filter by author Phantom4me opened on Dec 18, 2023

• Ujcms v8.0.2 has a vulnerability that attacker could spoofing servers with IP addresses.

  dromara/ujcms#7 · Filter by author Phantom4me opened on Dec 17, 2023