An issue in ChestnutCMS v.1.5.8 and before allows a remote attacker to execute arbitrary code via the template creation function

Published Feb 5, 2026 · Updated Feb 9, 2026 · Assigned by mitre