VULNERABILITY INTELLIGENCE

CVE-2025-10106

CVSS score8.8 HIGH

EPSS probability0.39%

CISA KEVNot currently listed

Published2025-09-08

Last modified2026-06-17

Description

A vulnerability has been found in yanyutao0402 ChanCMS up to 3.3.1. This affects an unknown part of the file /cms/collect/search. Such manipulation of the argument keyword leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.