ChanCMS vulnerabilities
We track 2 vulnerabilities in ChanCMS products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 10, 2025.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest ChanCMS vulnerabilities
- 9.8 Critical severity
Chancms: Improper Control of Generation of Code
A template injection vulnerability in the /vip/v1/file/save component of ChanCMS v3.3.4 allows attackers to execute arbitrary code via a crafted POST request.
- 8.8 High severity
ChanCMS: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was identified in ChanCMS up to 3.3.1. Impacted is an unknown function of the file /search/. The manipulation with the input '%20or%201=1%20%23/words.html leads to sql injection. Remote exploitation of the attack is possible. The exploit is pub