PatchTheCVEchancms vulnerabilities
Recent CVEs affecting chancms products. 16 tracked.
chancms has 16 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 14. Most recent: 2025-12-10. Highest priority: CVE-2025-65602 (score 51/100).
- CVE-2025-10110 MEDIUM 6.3 UPGRADE A vulnerability was identified in ChanCMS up to 3.3.1
- CVE-2025-11905 MEDIUM 6.3 UPGRADE A vulnerability was found in yanyutao0402 ChanCMS up to 3.3.2
- CVE-2025-11902 MEDIUM 6.3 UPGRADE A vulnerability was detected in yanyutao0402 ChanCMS up to 3.3.2
- CVE-2025-11903 MEDIUM 6.3 UPGRADE A flaw has been found in yanyutao0402 ChanCMS up to 3.3.2
- CVE-2025-11904 MEDIUM 6.3 UPGRADE A vulnerability has been found in yanyutao0402 ChanCMS up to 3.3.2
- CVE-2025-10210 MEDIUM 6.3 UPGRADE A weakness has been identified in yanyutao0402 ChanCMS up to 3.3.0
- CVE-2025-10211 MEDIUM 6.3 DOWNGRADE A security vulnerability has been detected in yanyutao0402 ChanCMS 3.3.0
- CVE-2025-8266 MEDIUM 6.3 UPGRADE A vulnerability has been found in yanyutao0402 ChanCMS up to 3.1.2 and classified as critical
- CVE-2025-8228 MEDIUM 6.3 UPGRADE A vulnerability was found in yanyutao0402 ChanCMS up to 3.1.2
- CVE-2025-8227 MEDIUM 6.3 UPGRADE A vulnerability was found in yanyutao0402 ChanCMS up to 3.1.2
- CVE-2025-8226 MEDIUM 4.3 UPGRADE A vulnerability was found in yanyutao0402 ChanCMS up to 3.1.2
- CVE-2025-8133 MEDIUM 6.3 UPGRADE A vulnerability classified as critical has been found in yanyutao0402 ChanCMS up to 3.1.2
- CVE-2025-8132 MEDIUM 5.4 UPGRADE A vulnerability was found in yanyutao0402 ChanCMS up to 3.1.2
- CVE-2025-65602 CRITICAL 9.8 DOWNGRADE A template injection vulnerability in the /vip/v1/file/save component of ChanCMS v3.3.4 allows attackers to ex
- CVE-2025-10106 MEDIUM 6.3 UPGRADE A vulnerability has been found in yanyutao0402 ChanCMS up to 3.3.1
- CVE-2025-10105 MEDIUM 6.3 UPGRADE A flaw has been found in yanyutao0402 ChanCMS up to 3.3.1
FAQ
How do I fix chancms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is chancms being exploited right now?
None of the tracked chancms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which chancms CVE should I patch first?
CVE-2025-65602 currently ranks highest (51/100): A template injection vulnerability in the /vip/v1/file/save component of ChanCMS v3.3.4 allows attackers to ex.