Advisories · Technology
owen2345 CamaleonCMS.
Every CVE that names owen2345 CamaleonCMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Camaleon CMS 2.7.5 through 2.9.1 SSRF via HTTP Redirect in Upload from URL
- owen2345 CamaleonCMS
- Server-side request forgery (SSRF)
- CVSS 7.2 High
CamaleonCMS Missing Authorization via Plugin Administration Endpoints
- owen2345 CamaleonCMS
- Broken access control
- CVSS 9.2 CriticalCritical · CVSS 9+
CamaleonCMS cama_contact_form Plugin Stored XSS via before_html Field
- owen2345 CamaleonCMS
- SQL injection
- CVSS 7.1 High
CamaleonCMS 2.9.1 Authenticated SQL Injection via Post Slug Field
- owen2345 CamaleonCMS
- SQL injection
- CVSS 7.5 High
CamaleonCMS 2.9.1 Server-Side Template Injection via test_email Action
- owen2345 CamaleonCMS
- Code injection
- CVSS 9.2 CriticalCritical · CVSS 9+
CamaleonCMS Stored XSS via Draft Post Title Creation Endpoint
- owen2345 CamaleonCMS
- Cross-site scripting (XSS)
- CVSS 8.7 High
CamaleonCMS 2.9.2 Privilege Escalation via Parameter Confusion in UsersController
- owen2345 CamaleonCMS
- Broken access control
- CVSS 5.3 Medium
CamaleonCMS 2.9.2 and earlier Missing Authorization via profile Action
- owen2345 CamaleonCMS
- Broken access control