CVE-2025-10110: Chancms

High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability was identified in ChanCMS up to 3.3.1. Impacted is an unknown function of the file /search/. The manipulation with the input '%20or%201=1%20%23/words.html leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Affected products

• Chancms Chancms: up to and including 3.3.1

Published 2025-09-08. Last modified 2026-06-17.