This vulnerability affects the execute function in the TemplateResultDirective.java file of Sanluan PublicCMS 5.202506.d. The issue arises from improper neutralization of special elements in the template engine when processing the templateContent argument. This can be exploited remotely to manipulate template rendering, potentially leading to security issues such as injection or unauthorized content execution. The vulnerability has a CVSS 4.0 score of 5.3, indicating medium severity. No official fix or vendor response has been provided, and exploit code is publicly available.

The vulnerability allows remote attackers to manipulate template content due to improper neutralization of special elements in the template engine. This could lead to unauthorized template manipulation, potentially impacting the integrity or confidentiality of rendered content. However, no confirmed exploitation in the wild has been reported. The medium CVSS score reflects limited but meaningful impact.

No official patch or remediation is currently available from the vendor, who has not responded to the disclosure. Users should monitor the vendor's communications for any future updates. Until a fix is released, consider restricting access to the affected templateResult API or applying custom input validation and sanitization on templateContent inputs to reduce risk.