chancms vulnerabilities
CVEs whose affected-version data names the chancms package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2025-10211Medium· 6.3PoCA security vulnerability has been detected in yanyutao0402 ChanCMS 3.3.0
A security vulnerability has been detected in yanyutao0402 ChanCMS 3.3.0. The affected element is the function CollectController of the file /cms/collect/getArticle. The manipulation of the argument taskUrl leads to server-side request f…
▾ Twilightchancms · chancmsEPSS 0.70%via NVD
CVE-2025-10210Medium· 6.3PoCA weakness has been identified in yanyutao0402 ChanCMS up to 3.3.0
A weakness has been identified in yanyutao0402 ChanCMS up to 3.3.0. Impacted is the function Search of the file app/modules/api/service/Api.js. Executing manipulation of the argument key can lead to sql injection. The attack can be launc…
▾ Twilightchancms · chancmsEPSS 1.3%via NVD