CVE-2025-2490

A vulnerability was found in Dromara ujcms 9.7.5. It has been rated as problematic. Affected by this issue is the function uploadZip/upload of the file /main/java/com/ujcms/cms/ext/web/backendapi/WebFileUploadController.java of the component File Upload. The manipulation leads to cross site...

PT-2025-11598

Name of the Vulnerable Software and Affected Versions Dromara ujcms version 9.7.5 Description A problematic issue was found in the File Upload component, specifically in the uploadZip/upload function of the WebFileUploadController.java file. This issue leads to cross-site scripting and can be...