Description
ChestnutCMS v1.5.10 has a SQL injection vulnerability. The content parameter of the cms_content tag can be manipulated in the admin backend and injected into a SQL query when the template is rendered.
Critical · 9.8
CVE-2026-36458
EUVD-2026-28377GHSA-c3xh-mwgm-9f7j
ChestnutCMS v1.5.10 has a SQL injection vulnerability. The content parameter of the cms_content tag can be manipulated in the admin backend…
Published May 7, 2026 · Updated May 8, 2026 · Assigned by mitre