errors11/CVE

Releases0

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2026-36458 ↗	May 7, 2026Thursday, 7 May 2026, 15:16	9.8 CRITICAL	—
ChestnutCMS v1.5.10 has a SQL injection vulnerability. The content parameter of the cms_content tag can be manipulated in the admin backend and injected into a SQL query when the template is rendered.