CVE-2026-36458
CriticalSummary
ChestnutCMS version 1.5.10 has a SQL injection vulnerability. The content parameter of the cms_content tag can be manipulated in the admin backend and injected into a SQL query when the template is rendered.
Risk Assessment
Exploitation of this vulnerability could lead to unauthorized access to the database and exposure of sensitive information. Organizations should be aware of the potential consequences related to data security.
Recommendation
It is recommended to update ChestnutCMS to the latest version to eliminate this vulnerability. Additionally, conducting a security audit of the application is advisable to identify other potential flaws.
Other vulnerabilities in ChestnutCMS v1.5.10
See all- CVE-2025-15009Medium
A flaw has been found in liweiyi ChestnutCMS up to 1.5.8. This vulnerability affects the function FilenameUtils.getExtension of the file /dev-api/common/upload. Manipulation of the argument File can lead to unrestricted upload, and the attack may be launched remotely.
- CVE-2025-12923Low
In liweiyi ChestnutCMS up to 1.5.8, the resourceDownload function in /dev-api/common/download is vulnerable to path traversal via manipulation of the path argument. The attack can be launched remotely, and the exploit is publicly available.
Original NVD description (English source)
ChestnutCMS v1.5.10 has a SQL injection vulnerability. The content parameter of the cms_content tag can be manipulated in the admin backend and injected into a SQL query when the template is rendered.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS