Owen2345 vulnerabilities

Products

• Camaleoncms 8
• Camaleon-cms 6
• Camaleon Cms 5

Newest

• owen2345 camaleon cms Camaleon CMS before 2.9.2 IDOR via Admin::CategoriesController CVE-2026-120430 5.3 MediumNovember 2, 2026
• owen2345 camaleon cms Camaleon CMS before 2.9.2 Missing Authorization via Admin::MediaController CVE-2026-120429 7.1 HighNovember 2, 2026
• owen2345 camaleon-cms Camaleon CMS before 2.9.3 Path Traversal RCE via Media crop_url Action CVE-2026-116009 8.7 HighOctober 24, 2026
• owen2345 camaleon cms owen2345 Camaleon CMS Media Crop media_controller.rb crop authorization CVE-2026-102261 Public exploit 5.3 MediumSeptember 29, 2026
• owen2345 camaleoncms Camaleon CMS 2.7.5 through 2.9.1 SSRF via HTTP Redirect in Upload from URL CVE-2026-86100 5.3 MediumSeptember 4, 2026
• owen2345 camaleoncms CamaleonCMS Missing Authorization via Plugin Administration Endpoints CVE-2026-73326 7.2 HighAugust 12, 2026
• owen2345 camaleoncms CamaleonCMS cama_contact_form Plugin Stored XSS via before_html Field CVE-2026-73332 9.2 CriticalAugust 12, 2026
• owen2345 camaleoncms CamaleonCMS 2.9.1 Authenticated SQL Injection via Post Slug Field CVE-2026-73331 7.1 HighAugust 12, 2026
• owen2345 camaleoncms CamaleonCMS 2.9.1 Server-Side Template Injection via test_email Action CVE-2026-73330 7.5 HighAugust 12, 2026
• owen2345 camaleoncms CamaleonCMS Stored XSS via Draft Post Title Creation Endpoint CVE-2026-73329 9.2 CriticalAugust 12, 2026
• owen2345 camaleoncms CamaleonCMS 2.9.2 Privilege Escalation via Parameter Confusion in UsersController CVE-2026-56721 8.7 HighAugust 11, 2026
• owen2345 camaleoncms CamaleonCMS 2.9.2 and earlier Missing Authorization via profile Action CVE-2026-56720 5.3 MediumAugust 11, 2026
• owen2345 camaleon-cms Camaleon CMS 2.9.2 Missing Authorization via /admin/post_type drafts endpoint CVE-2026-67616 5.3 MediumAugust 3, 2026
• owen2345 camaleon-cms Camaleon CMS 2.1.1 - 2.9.1 Authenticated RCE via select_eval Custom Field CVE-2026-66748 Public exploit 8.7 HighJuly 28, 2026
• camaleon cms cms, owen2345 camaleon cms +1 more Camaleon CMS 2.9.2 - Improper authorization in draft autosave endpoint CVE-2026-10715 5.1 MediumJune 12, 2026
• owen2345 camaleon cms Camaleon CMS AWS Uploader Authenticated Path Traversal Arbitrary File Read CVE-2026-1776 6.0 MediumMarch 9, 2026
• owen2345 camaleon-cms Camaleon CMS Privilege Escalation CVE-2025-2304 Public exploitFix available 9.4 CriticalMarch 14, 2025
• tuzitio camaleon cms, owen2345 camaleon-cms +1 more Arbitrary path traversal in Camaleon CMS CVE-2024-46987 Public exploitFix available EPSS 14.6% 7.7 HighSeptember 18, 2024
• tuzitio camaleon cms, owen2345 camaleon-cms +1 more Arbitrary file write leading to RCE in Camaleon CMS CVE-2024-46986 Public exploitFix available EPSS 37.1% 10.0 CriticalSeptember 18, 2024