CVE-2025-2491
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2025-2491
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-2491.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2025-2491
- Published
- 2025-03-18T15:16:01.707Z
- Modified
- 2025-11-16T15:16:59.455394Z
- Severity
-
- 5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
- Summary
- [none]
- Details
-
A vulnerability classified as problematic has been found in Dromara ujcms 9.7.5. This affects the function update of the file /main/java/com/ujcms/cms/ext/web/backendapi/WebFileTemplateController.java of the component Edit Template File Page. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
- References
Affected packages
Git / github.com/dromara/ujcms
Affected ranges
- Type
- GIT
- Repo
- https://github.com/dromara/ujcms
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast affected
Affected versions
v1.*
v1.0.0
v2.*
v2.0.0
v2.0.1
v2.0.2
v3.*
v3.0.0
v3.0.1
v3.1.0
v4.*
v4.1.1
v4.1.2
v4.1.3
v5.*
v5.5.1
v5.5.2
v6.*
v6.0.2
v7.*
v7.0.0
v7.0.1
v7.0.2
v7.0.3
v7.0.4
v8.*
v8.0.2
v9.*
v9.0.3
v9.0.4
v9.0.5
v9.1.0
v9.1.1
v9.1.4
v9.5.0
v9.5.1
v9.6.0
v9.6.1
v9.6.2
v9.6.3
v9.7.0
v9.7.1
v9.7.3
v9.7.5