CVE-2025-10211 Scanner
CVE-2025-10211 Scanner - Server-Side-Request-Forgery vulnerability in ChanCMS
Used 3.4k times · 5.9k assets checked · url
CVE
CVE-2025-10211
2.1
CVSSmedium
Exploitable remotely over the internet · low-privilege account sufficient.
Description
A security vulnerability has been detected in yanyutao0402 ChanCMS 3.3.0. The affected element is the function CollectController of the file /cms/collect/getArticle. The manipulation of the argument taskUrl leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Attack Vector
Network
Privileges Req.
Low
User Interaction
None
chancms
Updated Sep 18, 2026View on NVD →
S4E scanner
CVE history: chancms
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →