A vulnerability was found in Sanluan PublicCMS 5.202506.d . It has been classified as critical . The impacted element is the function execute of the file publiccms-core/src/main/java/com/publiccms/views/directive/tools/TemplateResultDirective.java of the component templateResult API . This manipulation of the argument templateContent causes improper neutralization of special elements used in a template engine. This vulnerability is tracked as CVE-2026-8740 . The attack is possible to be carried