CVE-2022-23329: Ujcms Jspxcms

Critical severity, CVSS 9.8. EPSS: 14.4% chance of exploitation in the next 30 days.

A vulnerability in ${"freemarker.template.utility.Execute"?new() of UJCMS Jspxcms v10.2.0 allows attackers to execute arbitrary commands via uploading malicious files.

Affected products

• Ujcms Jspxcms: version 10.2.0 only

Published 2022-02-04. Last modified 2026-06-17.