CVE-2026-36458
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
May 07, 2026
Vendor
unknown
Description
ChestnutCMS v1.5.10 has a SQL injection vulnerability. The content parameter of the cms_content tag can be manipulated in the admin backend and injected into a SQL query when the template is rendered.