CVE-2025-11904

ChanCMS up to version 3.3.2 contains a SQL injection vulnerability in the file /cms/model/hasUse, caused by unsafely handling the parameter ID. Multiple connected sources (CNVD-2025-24732, RH:CVE-2025-11904, CNNVD-202510-2437, NVD/CVE-2025-11904, etc.) describe that external SQL statements can be...