<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: owen2345-camaleoncms</title><description>Every new CVE for owen2345-camaleoncms.</description><link>https://agentprime.io/</link><item><title>CVE-2026-86100: Camaleon CMS 2.7.5 through 2.9.1 SSRF via HTTP Redirect in Upload from URL</title><link>https://agentprime.io/advisories/CVE-2026-86100/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-86100/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 04 Sep 2026 23:16:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-73326: CamaleonCMS Missing Authorization via Plugin Administration Endpoints</title><link>https://agentprime.io/advisories/CVE-2026-73326/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73326/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 12 Aug 2026 19:13:28 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-73332: CamaleonCMS cama_contact_form Plugin Stored XSS via before_html Field</title><link>https://agentprime.io/advisories/CVE-2026-73332/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73332/</guid><description>CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 12 Aug 2026 19:09:47 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-73331: CamaleonCMS 2.9.1 Authenticated SQL Injection via Post Slug Field</title><link>https://agentprime.io/advisories/CVE-2026-73331/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73331/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 12 Aug 2026 19:06:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-73330: CamaleonCMS 2.9.1 Server-Side Template Injection via test_email Action</title><link>https://agentprime.io/advisories/CVE-2026-73330/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73330/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 12 Aug 2026 19:00:36 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-73329: CamaleonCMS Stored XSS via Draft Post Title Creation Endpoint</title><link>https://agentprime.io/advisories/CVE-2026-73329/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73329/</guid><description>CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 12 Aug 2026 18:54:07 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-56721: CamaleonCMS 2.9.2 Privilege Escalation via Parameter Confusion in UsersController</title><link>https://agentprime.io/advisories/CVE-2026-56721/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-56721/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 11 Aug 2026 15:48:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-56720: CamaleonCMS 2.9.2 and earlier Missing Authorization via profile Action</title><link>https://agentprime.io/advisories/CVE-2026-56720/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-56720/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 11 Aug 2026 15:39:09 GMT</pubDate><category>CVE</category></item></channel></rss>