CVE-2026-36458

ChestnutCMS v1.5.10 has a SQL injection vulnerability. The content parameter of the cmscontent tag can be manipulated in the admin backend and injected into a SQL query when the template is rendered...

CVE-2026-36458

ChestnutCMS v1.5.10 is affected by a SQL injection vulnerability. The issue resides in the cms_content tag , where the content parameter can be manipulated within the admin backend . This manipulation allows an attacker to inject malicious code into a SQL query during the template rendering proce...