CVE-2022-28090: Ujcms Jspxcms

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

Jspxcms v10.2.0 allows attackers to execute a Server-Side Request Forgery (SSRF) via /cmscp/ext/collect/fetch_url.do?url=.

Affected products

• Ujcms Jspxcms: version 10.2.0 only

Published 2022-05-04. Last modified 2026-06-17.