A vulnerability was found in MuYuCMS up to 2.7. It has been rated as critical. Impacted is an unknown function of the file /index/index.html of the component Add Fiend Link Handler. Performing manipulation of the argument Link URL results in server-side request forgery.

This vulnerability was named CVE-2025-10787. The attack may be initiated remotely. In addition, an exploit is available.