CVE-2024-57450: 1000mz Chestnutcms

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

ChestnutCMS <=1.5.0 is vulnerable to File Upload via the Create template function.

Affected products

• 1000mz Chestnutcms: up to and including 1.5.0

Published 2025-02-03. Last modified 2026-06-17.