Search for packages
| purl | pkg:gem/camaleon_cms@2.9.2 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2018-18260
Aliases: GHSA-7f84-9cqf-g4j9 |
Camaleon CMS vulnerable to Stored Cross-site Scripting In the 2.4 version of Camaleon CMS, Stored XSS has been discovered. The … | There are no reported fixed by versions. |
|
CVE-2021-25972
Aliases: GHSA-vx6p-q4gj-x6xx |
Camaleon CMS vulnerable to Server-Side Request Forgery In Camaleon CMS, versions 2.1.2.0 through 2.6.0, are vulnerable to Server-Side Request Forgery … | There are no reported fixed by versions. |
|
CVE-2021-25969
Aliases: GHSA-x78v-4fvj-rg9j |
Camaleon CMS Stored Cross-site Scripting vulnerability In “Camaleon CMS” application, versions 0.0.1 through 2.6.0 are vulnerable to stored XSS, that … | There are no reported fixed by versions. |
|
CVE-2021-25970
Aliases: GHSA-438x-2p9v-g8h9 |
Camaleon CMS Insufficient Session Expiration vulnerability Camaleon CMS 0.1.7 through 2.6.0 doesn’t terminate the active session of the users, even … | There are no reported fixed by versions. |
|
CVE-2021-25971
Aliases: GHSA-r2w2-h6r8-3r53 |
Camaleon CMS vulnerable to Uncaught Exception In Camaleon CMS, versions 2.0.1 through 2.6.0 are vulnerable to an Uncaught Exception. The … | There are no reported fixed by versions. |
|
GHSA-75j2-9gmc-m855
|
Camaleon CMS vulnerable to stored XSS through user file upload (GHSL-2024-184) A stored cross-site scripting has been found in the … | There are no reported fixed by versions. |
|
CVE-2024-46986
Aliases: GHSA-wmjg-vqhv-q5p5 |
Camaleon CMS affected by arbitrary file write to RCE (GHSL-2024-182) An arbitrary file write vulnerability accessible via the upload method … | There are no reported fixed by versions. |
|
CVE-2026-66748
Aliases: GHSA-7xm9-634w-f5r7 |
Camaleon CMS (2.1.1 to 2.9.1) contains an authenticated RCE vulnerability Camaleon CMS versions 2.1.1 through 2.9.1 contains an authenticated remote … | There are no reported fixed by versions. |
|
CVE-2026-1776
Aliases: GHSA-jw5g-f64p-6x78 |
Camaleon CMS vulnerable to Path Traversal through AWS S3 uploader implementation Camaleon CMS versions 2.4.5.0 through 2.9.1, prior to commit … | There are no reported fixed by versions. |
|
CVE-2026-10715
Aliases: GHSA-vg43-9r8m-q2cc |
Camaleon CMS 2.9.2 contains an improper authorization vulnerability in the administrator draft autosave endpoint. A low-privileged authenticated user can send … | There are no reported fixed by versions. |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2026-66748
|
Camaleon CMS (2.1.1 to 2.9.1) contains an authenticated RCE vulnerability Camaleon CMS versions 2.1.1 through 2.9.1 contains an authenticated remote … |
GHSA-7xm9-634w-f5r7
|
|
CVE-2026-1776
|
Camaleon CMS vulnerable to Path Traversal through AWS S3 uploader implementation Camaleon CMS versions 2.4.5.0 through 2.9.1, prior to commit … |
GHSA-jw5g-f64p-6x78
|
|
CVE-2026-73330
|
CamaleonCMS 2.9.1 Server-Side Template Injection via test_email Action CamaleonCMS 2.9.1 contains a server-side template injection vulnerability that allows authenticated administrators … |
GHSA-xgmr-hcvf-x3qc
|