PatchTheCVEulicms vulnerabilities and fixes
Recent CVEs affecting ulicms, with upgrade or downgrade steps. 4 tracked.
ulicms has 4 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 2. Most recent: 2025-12-17. Highest priority: CVE-2023-53914 (score 60/100).
- CVE-2023-53925 MEDIUM 6.1 DOWNGRADE UliCMS 2023.1 contains a stored cross-site scripting vulnerability that allows attackers to upload malicious S
- CVE-2023-53924 HIGH 8.8 DOWNGRADE UliCMS 2023.1-sniffing-vicuna contains a remote code execution vulnerability that allows authenticated attacke
- CVE-2023-53923 CRITICAL 9.8 DOWNGRADE UliCMS 2023.1 contains a privilege escalation vulnerability that allows unauthenticated attackers to create ad
- CVE-2023-53914 CRITICAL 9.8 DOWNGRADE UliCMS 2023.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to create
FAQ
How do I fix ulicms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ulicms being exploited right now?
None of the tracked ulicms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ulicms CVE should I patch first?
CVE-2023-53914 currently ranks highest (60/100): UliCMS 2023.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to create .