critical9.8
CVE-2025-65602
A template injection vulnerability in the /vip/v1/file/save component of ChanCMS v3.3.4 allows attackers to execute arbitrary code via a crafted POST request.
Impact
A template injection vulnerability in the /vip/v1/file/save component of ChanCMS v3.3.4 allows attackers to execute arbitrary code via a crafted POST request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chancms | Chancms | Version 3.3.4 |