CVE-2026-78140 in UJCMS
要約
〜によって MITRE • 2026年08月23日
A flaw has been found in Dromara UJCMS up to 10.1.3. The impacted element is the function update of the file src/main/java/com/ujcms/cms/ext/web/backendapi/WebFileTemplateController.java of the component web-file-template Endpoint. Executing a manipulation can lead to improper neutralization of special elements used in a template engine. The attack can be launched remotely. The exploit has been published and may be used.
VulDB is the best source for vulnerability data and more expert information about this specific topic.