Filtered by vendor Liweiyi Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-36458 1 Liweiyi 1 Chestnutcms 2026-05-07 N/A
ChestnutCMS v1.5.10 has a SQL injection vulnerability. The content parameter of the cms_content tag can be manipulated in the admin backend and injected into a SQL query when the template is rendered.
CVE-2025-70073 2 1000mz, Liweiyi 2 Chestnutcms, Chestnutcms 2026-02-12 7.2 High
An issue in ChestnutCMS v.1.5.8 and before allows a remote attacker to execute arbitrary code via the template creation function
CVE-2025-15009 2 1000mz, Liweiyi 2 Chestnutcms, Chestnutcms 2025-12-31 6.3 Medium
A flaw has been found in liweiyi ChestnutCMS up to 1.5.8. This vulnerability affects the function FilenameUtils.getExtension of the file /dev-api/common/upload of the component Filename Handler. Executing manipulation of the argument File can lead to unrestricted upload. The attack may be launched remotely. The exploit has been published and may be used.