CVE-2025-8228 | yanyutao0402 ChanCMS up to 3.1.2 /cms/collect/getPages targetUrl server-side request forgery (ICLP28)

July 26, 2025 Yanac

A vulnerability was found in yanyutao0402 ChanCMS up to 3.1.2. It has been rated as critical. Affected by this issue is the function getPages of the file /cms/collect/getPages. The manipulation of the argument targetUrl leads to server-side request forgery.

This vulnerability is handled as CVE-2025-8228. The attack may be launched remotely. Furthermore, there is an exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More