Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/camaleon_cms@2.4
purl pkg:gem/camaleon_cms@2.4
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 2.8
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
CVE-2018-18260
Aliases:
GHSA-7f84-9cqf-g4j9
Camaleon CMS vulnerable to Stored Cross-site Scripting In the 2.4 version of Camaleon CMS, Stored XSS has been discovered. The … There are no reported fixed by versions.
CVE-2018-18260

Cross-site Scripting A Stored XSS has been discovered in cameleon The profile image in the User settings section can be …
2.4.1
Vulnerable
GHSA-7f84-9cqf-g4j9
Aliases:
CVE-2018-18260
Camaleon CMS vulnerable to Stored Cross-site Scripting In the 2.4 version of Camaleon CMS, Stored XSS has been discovered. The … There are no reported fixed by versions.
This package is not known to fix any advisories.