CVE-2025-10787

MediumCVSS 6.3

Published: 22/09/2025(UTC)Updated: 19/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

17th percentile - higher than 17% of all known CVEs

Summary

A vulnerability was found in MuYuCMS up to 2.7 in an unknown function of /index/index.html within the Add Fiend Link Handler component. Manipulating the Link URL argument results in server-side request forgery (SSRF).

Risk Assessment

An attacker could force the server to make requests to internal resources, potentially leading to information disclosure or further attacks.

Recommendation

Update MuYuCMS to the latest version or apply patches; restrict manipulation of the Link URL argument.

Other vulnerabilities in MuYuCMS

CVE-2025-10993Medium
A security flaw was discovered in MuYuCMS up to 2.7 affecting unknown functionality of the /admin.php file in the Template Management component. Manipulation results in code injection, and the attack can be launched remotely.

Original NVD description (English source)

A vulnerability was found in MuYuCMS up to 2.7. Impacted is an unknown function of the file /index/index.html of the component Add Fiend Link Handler. Performing manipulation of the argument Link URL results in server-side request forgery. The attack may be initiated remotely. The exploit has been made public and could be used.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS