Unrated severityNVD Advisory· Published Mar 18, 2025· Updated Mar 18, 2025
Dromara ujcms Edit Template File Page WebFileTemplateController.java update cross site scripting
CVE-2025-2491
Description
A vulnerability classified as problematic has been found in Dromara ujcms 9.7.5. This affects the function update of the file /main/java/com/ujcms/cms/ext/web/backendapi/WebFileTemplateController.java of the component Edit Template File Page. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Dromara/ujcmsv5Range: 9.7.5
Patches
Vulnerability mechanics
References
4- github.com/dromara/ujcms/issues/14mitreexploitissue-tracking
- vuldb.commitrethird-party-advisory
- vuldb.commitresignaturepermissions-required
- vuldb.commitrevdb-entrytechnical-description
News mentions
0No linked articles in our index yet.