Priority MEDIUM 50
A template injection vulnerability in the /vip/v1/file/save component of ChanCMS v3.3.4 allows attackers to execute arbitrary code via a crafted POST request.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00539 · Published 2025-12-10 · No fix listed CWE-1336
Priority MEDIUM 57
A vulnerability was found in yanyutao0402 ChanCMS up to 3.3.2.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00842 · Published 2025-10-17 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability has been found in yanyutao0402 ChanCMS up to 3.3.2.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00633 · Published 2025-10-17 · No fix listed CWE-74
Priority MEDIUM 57
A flaw has been found in yanyutao0402 ChanCMS up to 3.3.2.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00633 · Published 2025-10-17 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability was detected in yanyutao0402 ChanCMS up to 3.3.2.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00633 · Published 2025-10-17 · No fix listed CWE-74
Priority MEDIUM 57
A security vulnerability has been detected in yanyutao0402 ChanCMS 3.3.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00721 · Published 2025-09-10 · No fix listed CWE-918
Priority MEDIUM 57
A weakness has been identified in yanyutao0402 ChanCMS up to 3.3.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.01327 · Published 2025-09-10 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability was identified in ChanCMS up to 3.3.1.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0034 · Published 2025-09-08 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability has been found in yanyutao0402 ChanCMS up to 3.3.1.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00389 · Published 2025-09-08 · No fix listed CWE-74
Priority HIGH 65
A flaw has been found in yanyutao0402 ChanCMS up to 3.3.1.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00342 · Published 2025-09-08 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability has been found in yanyutao0402 ChanCMS up to 3.1.2 and classified as critical.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.01135 · Published 2025-07-28 · Fixed in 3.1.3 CWE-20
Priority MEDIUM 57
A vulnerability was found in yanyutao0402 ChanCMS up to 3.1.2.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00708 · Published 2025-07-27 · Fixed in 3.1.3 CWE-918
Priority MEDIUM 57
A vulnerability was found in yanyutao0402 ChanCMS up to 3.1.2.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00745 · Published 2025-07-27 · Fixed in 3.1.3 CWE-20
Priority MEDIUM 57
A vulnerability was found in yanyutao0402 ChanCMS up to 3.1.2.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00692 · Published 2025-07-27 · Fixed in 3.1.3 CWE-200
Priority MEDIUM 57
A vulnerability classified as critical has been found in yanyutao0402 ChanCMS up to 3.1.2.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00421 · Published 2025-07-25 · Fixed in 3.1.3 CWE-918
Priority MEDIUM 57
A vulnerability was found in yanyutao0402 ChanCMS up to 3.1.2.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00665 · Published 2025-07-25 · Fixed in 3.1.3 CWE-22
THREATIST.IORead the docs