Threats affecting pkg:maven/com.ujcms/ujcms

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.9	EPSS 0.6%	CVE-2026-93961Dromara UJCMS · Improper Authorization Medium6.9EPSS 0.6%2026-09-20CVE Database V5CVE-2026-93961 CVE-2026-93961 is an improper authorization vulnerability in Dromara UJCMS affecting versions 12.3.0 and 12.3.1. The flaw exists in the usernameExist function of the UserController component, allowing remote attackers to manipulate the Username argument to bypass authorization controls. The issue was reported early to the project but has not yet received a response or fix. EPSS 0.6%Vulnerability	CVE Database V5	2026-09-20

Page 1 of 1