CVE-2026-102771

MEDIUM 4.7

Naichen ThinkCMF Email Template MailController.php templatePut special elements in template engine

CVSS Score

4.7

EPSS Score

0.0%

EPSS Percentile

0th

A security vulnerability has been detected in Naichen ThinkCMF up to 8.0.7. Affected by this issue is the function MailController::templatePut of the file cmf-api/src/admin/controller/MailController.php of the component Email Template. The manipulation leads to improper neutralization of special elements used in a template engine. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CWE	CWE-1336 CWE-791
Vendor	naichen
Product	thinkcmf
Published	Sep 29, 2026

Stay Ahead of the Next One

Get instant alerts for naichen thinkcmf

Be the first to know when new medium vulnerabilities affecting naichen thinkcmf are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

Naichen / ThinkCMF

8.0.0 8.0.1 8.0.2 8.0.3 8.0.4 8.0.5 8.0.6 8.0.7

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/411468 vuldb.com: https://vuldb.com/vuln/411468/cti vuldb.com: https://vuldb.com/cve/CVE-2026-102771 vuldb.com: https://vuldb.com/submit/943081 github.com: https://github.com/coolcj-stack/ThinkCMF-v8.0.1-SSTI-Vulnerability/blob/main/ThinkCMF_Vulnerability_Report_EN.docx

Credits

🔍 BlackSpdier (VulDB User) VulDB CNA Team