TI-2024-01171 CVE-2024-1257 · GHSA-rwrp-rr8g-cg9q
Jspxcms find_text.do cross site scripting
Priority MEDIUM 60
A vulnerability was found in Jspxcms 10.2.0.
Ujcms
Records20All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Ujcms records in CISA KEVNo Ujcms vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records in Jspxcms · all components
TI-2024-00555 CVE-2024-0599 · GHSA-4j3q-m6c3-7fq3
Jspxcms Document Management Page InfoController.java cross site scripting
Priority MEDIUM 58
A vulnerability was found in Jspxcms 10.2.0.
TI-2022-07442 CVE-2022-23329 · GHSA-mgq8-cgrr-q7fj
A vulnerability in ${"freemarker.template.utility.Execute"?new() of UJCMS Jspxcms v10.2.0…
Priority MEDIUM 57
A vulnerability in ${"freemarker.template.utility.Execute"?new() of UJCMS Jspxcms v10.2.0 allows attackers to execute arbitrary commands via uploading malicious files.
TI-2022-10904 CVE-2022-28090 · GHSA-fq6m-725p-m7wr
Jspxcms v10.2.0 allows attackers to execute a Server-Side Request Forgery (SSRF) via…
Priority LOW 31
Jspxcms v10.2.0 allows attackers to execute a Server-Side Request Forgery (SSRF) via /cmscp/ext/collect/fetch_url.do?url=.
TI-2025-19134 CVE-2025-25772 · GHSA-r4wq-76x5-pwj9
A Cross-Site Request Forgery (CSRF) in the component /back/UserController.java of Jspxcms…
Priority LOW 22
A Cross-Site Request Forgery (CSRF) in the component /back/UserController.java of Jspxcms v9.0 to v9.5 allows attackers to arbitrarily add Administrator accounts via a crafted request.
TI-2024-01170 CVE-2024-1256 · GHSA-2c82-fg6w-rjhp
Jspxcms filter_text.do cross site scripting
Priority LOW 21
A vulnerability was found in Jspxcms 10.2.0 and classified as problematic.